Personal tools
You are here: Home User Support User Documentation DEISA Accounting Report Tool 3 Appendix

3 Appendix

3.1 Certificate Guide

Howto get a certificate

The procedures to request a personal certificate are different at each DEISA site. Find your local Certificate Authority by following the link to the EUGridPMA Clickable Map of Authorities. There you can find specific information about requesting a certificate.

If you have a running Unicore environment, you might already be an owner of a valid certificate. In this case there is no need for requesting a new certificate. You can simply use your Unicore certificate.

Creating a valid keystore

In the most cases you will have a certificate-key-pair in PEM or DER file format now. For using the DART CGI source you require either a Java KeyStore (JKS) file or PKCS12 file.

If you intend to use Unicore or prefer to use a JKS keystore, we recommend using Unicore for creating a JKS keystore. A good howto about that can be found on the FZJ Homepage. If you do not intend to use Unicore use the command below to create a PKCS12 keystore file.

For DART the CA certificates are already included in the application. So only the PKCS12 keystore file needs to be created. A PKCS12 keystore can be created from your PEM or DER files with the commandline tool OpenSSL. The program is installed on mostly all unix systems. If not, the most distributions have openssl packages. It is also possible to install or compile OpenSSL on Microsoft Windows.

On the commandline enter the following command to create a PKCS12 keystore:

openssl pkcs12 -export -in usercert.pem -inkey userkey.pem -name "<Your Alias>" -out keystore.p12

You will need to enter you pass phrase to unlock your certificate userkey, and give a new password to protect your new PKCS12 keystore file. Then, you will have a working PKCS12 keystore file keystore.p12 to connect to CGI sources using DART. When using DART, select this file an give the new password you specified here to open the file.

3.2 FAQ

  • What is DART licensed under?
    DART is licensed unter the Apache License, Version 2.0
  • What does the 'CN=' in the name field mean?
    The usage records do not contain the real name of the account owner. The only information is the CommonName (CN) of the users certificate. In the most cases the CN includes the users real name. But there may be cases where the CN does not match the real name of the certificate owner. Maybe a certificate like this 'CN=snoopy,O=someinstitude,C=EU' is issued, the DART will display 'snoopy' and not the users real name.
  • What does the "Jobs" value mean?
    The values are summaries of all related usage records. The "Jobs" value indicates how much jobs are aggregated.
  • What does the wallclock value mean?
    The wallclock time is the time, your job is running and is using resources.
  • What does the Cpu time value mean?
    That is the real time used for computing by the cores. Idle times are not included.
  • What does the Job time value mean?
    This value is the wallclock time multiplied with the count of cores used or reserved. This is the value used for charging jobs in the DEISA network.
  • What's the difference between Cpu time and Job time?
    The Job times includes the time the cores are not busy. The Cpu time excludes this time. If the cores have to wait very often, maybe for I/O operations, the difference between this values will become bigger than if the cores don't need to wait.
  • What does (norm) mean?
    The supercomputers used in the DEISA network are different. That means that the same job on different machines will use a different time because both using different hardware. So the deisa stuff introduced normalization values to make the cpu time and cpu duration comparable between different platforms. The fields marked with (norm) include this normalization factor. The fields without the (norm) mark are the real times on a specific platform.
  • I often get an Request timed out error message
    The retrievel of data requieres to much time. That may be caused by a big amount of usage records. Try to select a shorter period of time and inform the DART support team.
  • Is there a GUI tool to handle this certificate stuff?

    You can find a third party tool to handle Java Keystores here. But you have to figure out how it works by yourself. We do not support this tool. If you are using Unicore, use the Unicore keystore manager!

Document Actions