| Both sides previous revisionPrevious revisionNext revision | Previous revision |
| newcomers:gettingstarted [2024/07/16 14:11] – [VOMS and GRID certificates] iwn | newcomers:gettingstarted [2024/08/21 15:44] (current) – [More information] iwn |
|---|
| |
| After all that, you should register with **[[https://en.wikipedia.org/wiki/VOMS|VOMS]]**, get and install **GRID certificates** on your local computer and computing accounts. These certificates give you authorized acces to a number of grid computing services. Follow the steps lined out [[https://twiki.cern.ch/twiki/bin/viewauth/CMS/DQMGUIGridCertificate|here]] and [[https://twiki.cern.ch/twiki/bin/view/CMSPublic/WorkBookStartingGrid|here]]. In summary: | After all that, you should register with **[[https://en.wikipedia.org/wiki/VOMS|VOMS]]**, get and install **GRID certificates** on your local computer and computing accounts. These certificates give you authorized acces to a number of grid computing services. Follow the steps lined out [[https://twiki.cern.ch/twiki/bin/viewauth/CMS/DQMGUIGridCertificate|here]] and [[https://twiki.cern.ch/twiki/bin/view/CMSPublic/WorkBookStartingGrid|here]]. In summary: |
| - install a GRID user certificate on you local computer, see [[https://ca.cern.ch/ca/|the CERN Certification Authority]] ([[https://ca.cern.ch/ca/Help/?kbid=040111|use of Mozilla Firefox]] highly recommended, Safari highly discouraged), | |
| - <del>register with VO CMS [[https://voms.cern.ch:8443/voms/cms/admin/home.action|here]] or [[https://voms2.cern.ch:8443/voms/cms/register/start.action|here]] (might take a few days to come through),</del> Registering with VO CMS should not be necessary anymore since June 2024! | - <del>register with VO CMS [[https://voms.cern.ch:8443/voms/cms/admin/home.action|here]] or [[https://voms2.cern.ch:8443/voms/cms/register/start.action|here]] (might take a few days to come through),</del> Registering with VO CMS should not be necessary anymore since June 2024! |
| - export the certificate (presumably from FireFox) to ''cert.p12'', from which you create ''.pem'' files to install them on the computing account: | - Go to the the CERN Certification Authority ([[https://ca.cern.ch/ca/]]), and install a "GRID user" certificate on your local computer. [[https://ca.cern.ch/ca/Help/?kbid=040111|Use of Mozilla Firefox]] highly recommended, Safari highly discouraged. |
| | - Export the certificate (presumably from FireFox) to ''cert.p12''. |
| - for lxplus, see [[https://twiki.cern.ch/twiki/bin/viewauth/CMS/DQMGUIGridCertificate|this page]], | - for lxplus, see [[https://twiki.cern.ch/twiki/bin/viewauth/CMS/DQMGUIGridCertificate|this page]], |
| - for PSI T3, see [[https://wiki.chipp.ch/twiki/bin/view/CmsTier3/HowToSetupYourAccount|this page]] and [[newcomers:gettingstarted#setting_up_the_accounts1|the next section]]. | - for PSI T3, see [[https://wiki.chipp.ch/twiki/bin/view/CmsTier3/HowToSetupYourAccount|this page]] and [[newcomers:gettingstarted#setting_up_the_accounts1|the next section]]. |
| | - If needed, copy the certification files to the computing system you need (using ''scp'' for example). From these ''.p12'' files, create ''.pem'' files to install them. |
| |
| To create the ''.pem'' files from the ''.p12'' certicicate, and set the correct permissions: | To create the ''.pem'' files from the ''.p12'' certicicate, and set the correct permissions: |
| <code> | <code> |
| | # if needed: copy the cert.p12 file to lxplus/t3ui03/... using scp |
| mkdir $HOME/.globus | mkdir $HOME/.globus |
| openssl pkcs12 -in cert.p12 -clcerts -nokeys -out $HOME/.globus/usercert.pem | openssl pkcs12 -in cert.p12 -clcerts -nokeys -out $HOME/.globus/usercert.pem |
| openssl pkcs12 -in cert.p12 -nocerts -out $HOME/.globus/userkey.pem | openssl pkcs12 -in cert.p12 -nocerts -out $HOME/.globus/userkey.pem |
| chmod go-rw $HOME/.globus/userkey.pem | chmod go-rw $HOME/.globus/userkey.pem # set read permissions |
| </code> | </code> |
| |
| * [[https://github.com|GitHub]] will come handy to share code with others. ''git'' comes pre-installed in most command lines. This group has its own [[https://github.com/UZHCMS|GitHub repository]]. Check [[computing:git|this page]] out for more information. | * [[https://github.com|GitHub]] will come handy to share code with others. ''git'' comes pre-installed in most command lines. This group has its own [[https://github.com/UZHCMS|GitHub repository]]. Check [[computing:git|this page]] out for more information. |
| * [[https://resources.web.cern.ch/resources/Help/?kbid=067040|This CERN Resources page]] explains how you can increase the quota on you disk space on on lxplus and ''/afs''. | * [[https://resources.web.cern.ch/resources/Help/?kbid=067040|This CERN Resources page]] explains how you can increase the quota on you disk space on on lxplus and ''/afs''. |
| * [[cern:website|This page]] explains how you make a personal website on CERN and share documents on it via your ''/afs'' or ''/eos'' directory. | * [[https://cms-analysis.docs.cern.ch/guidelines/other/plot_browser/|This page]] explains how you make a personal website on CERN and share documents on it via your ''/afs'' or ''/eos'' directory. |
| * [[https://cern.ch/computersecuritycourse|CERN's Computer Security Course]], [[https://security.web.cern.ch/security/recommendations/en/how_to_secure_your_pc.shtml#l2|CERN's anti-virus software]] | * [[https://cern.ch/computersecuritycourse|CERN's Computer Security Course]], [[https://security.web.cern.ch/security/recommendations/en/how_to_secure_your_pc.shtml#l2|CERN's anti-virus software]] |
