Managing Your User Certificate

Once a year, you must renew your DoE grid certificate. You'll get renewal notices when the time comes. Once you've gone through their process to get the new certificate, you must install it properly. The instructions that follow assume you have your new certificate loaded into your web browser.

1. From your browser, save your certificate in PKCS12 format with a .p12 extension
2. Copy the .p12 file to a CSL machine
3. Extract the public user certificate:

   openssl pkcs12 -in <CERT_P12_FILE> -clcerts -nokeys -out $HOME/.globus/usercert.pem

4. Extract the private user key:

   openssl pkcs12 -in <CERT_P12_FILE> -nocerts -out $HOME/.globus/userkey.pem

5. Copy the usercert.pem and userkey.pem files to other machines as needed