Skip to content

Generating a grid certificate

Jump to bottom
Dimitris Papagiannis edited this page Jun 10, 2024 · 6 revisions

In order for Run Registry to access the Offline DQMGUI, it will need a CERN Grid certificate. While, in principle, a personal certificate would work, it's better that you request it from the cmsrr service account, which was made explicitly for this reason.

  1. Go here and login as cmsrr.
  2. Create a new certificate, with some password. You will end up with a myCertificate.p12 file.
  3. Download the file and run: 
    openssl pkcs12 -in myCertificate.p12 -nodes -nocerts -out $HOME/.globus/userkey_rr.pem  # You will be asked for the password you set before
openssl pkcs12 -in myCertificate.p12 -clcerts -nokeys -out $HOME/.globus/usercert_rr.pem  # You will be asked for the password you set before
  4. For this certificate to be granted access to CMS sites, however, you will need to go to VOMS2 with your personal account and click Add an additional certificate. image
  5. Attach the usercert_rr.pem file you generated in the previous step, and wait for it to be approved.
Clone this wiki locally