Personal tools
You are here: Home User Support User Documentation DEISA MyProxy Service 2 Storing your Proxy Certificate on the DEISA MyProxy Server

2 Storing your Proxy Certificate on the DEISA MyProxy Server

2.1 Using the Java Web Start MyProxy Uploader

The UK's National Grid Service (NGS) provides a Certificate Management Wizard (MyProxy Uploader) Java Web Start application. It can be run by either visiting http://www.ngs.ac.uk/tools/certwizard and then pressing the (orange) Launch button or by clicking http://tools.ngs.ac.uk/ngstools/certwizard/myproxy.jnlp (NB: the Java version will not be checked).

Alternatively, a Java jar file can be downloaded from the same URL, namely http://www.ngs.ac.uk/tools/certwizard, which allows users to start the application without using a browser. Using the tool will, in each case, involve the following steps to configure the MyProxy Uploader tool to use MyProxy server hosted by LRZ.

  • From the left-hand side menu (See Figure 1) click "4) MyProxy servers"
  • Click "Create New"
  • Fill as Server Host myproxy1.deisa.eu
  • Add a description into Server Name field.
  • The Server DN can be left as it is or can be set to myproxy1 using /C=DE/O=GridGermany/OU=Leibniz-Rechenzentrum/CN=myproxy.lrz.de
  • The server port is 7512.
  • Click Save button. Then the property file dialog will appear. Choose a name and click Save.

To use the other DEISA MyProxy server at SARA, employ the other possible "Server Name" myproxy2.deisa.eu where its "Server DN" is /O=dutchgrid/O=hosts/OU=sara.nl/CN=voms.grid.sara.nl

Figure 1

1: MyProxy Uploader: On the left-hand side select item "4) MyProxy Servers" to add a new MyProxy server.

Credentials access

  • Go to the "1) Certificate / Key" menu
  • Locate your p12 file or pem files.

Sending the proxy

  • Click "Use Certificate"
  • Go to "MyProxy"
  • Make sure that your MyProxy server is selected (myproxy1.deisa.eu).
  • Click "Upload"

Then enter the following information (see Figure 2)

  • Leave the Proxy Type as it is
  • Private Key password
  • MyProxy Username
  • MyProxy Password (not same as Private Key Password)

By clicking the OK button your proxy will be sent to the MyProxy Service.

Figure 2

2: MyProxy Uploader: Upload Dialogue from "Do Actions" menu.

Your MyProxy Username and MyProxy Password are required when you fetch your proxy. Now you can use, for example, GSISSH-Term from a machine which does not have certificates at hand, as long as the proxy is valid on the MyProxy server.

2.2 Using Globus command-line tools

If the private key is on a machine with a Globus installation, then the following Globus command can be used to store the proxy certificate on the MyProxy server: myproxy-init

Optional command line parameters for this command include
- Username: -l myusername
- Lifetime in hours of the proxy on the server: -c 168 (this is the default value)
- Maximum lifetime in hours of the proxy when retrieved from server: -t 12 (default)
- Target host: -s myproxy1.deisa.eu
By default, the target host name should have been set already through the module load globus command.

2.3 test

Testing changes

Here are some texts.

Just for testing purposes, as title says.

Now saved.

More changes.

By OlliS

 

2.4 Using the Java Web Start MyProxy Uploader 2

The UK’s National Grid Service (NGS) provides a Certificate Management Wizard (MyProxy Uploader) Java Web Start application. It can be run by either visiting http://www.ngs.ac.uk/tools/certwizard and then pressing the (orange) Launch button or by clicking http://tools.ngs.ac.uk/ngstools/certwizard/myproxy.jnlp (NB: the Java version will not be checked)

Alternatively, a Java jar file can be downloaded from the same URL, namely http://www.ngs.ac.uk/tools/certwizard which allows users to start the application without a browser. Using the tool will, in each case, involve the following steps to configure the MyProxy Uploader tool to use MyProxy server hosted by LRZ.

-    From the left-hand side menu (See Figure 1) click "4) MyProxy servers
-    Click "Create New"
-    Fill as Server Host myproxy1.deisa.eu
-    Add a description into Server Name field.
-    The Server DN can be left as it is or can be set to myproxy1 using /C=DE/O=GridGermany/OU=Leibniz-Rechenzentrum/CN=myproxy.lrz.de
-    The server port is 7512.
-    Click Save button. Then the property file dialog will appear. Choose a name and click Save.

To use the other DEISA MyProxy server at SARA, employ the other possible "Server Name"  myproxy2.deisa.eu where its "Server DN" is /O=dutchgrid/O=hosts/OU=sara.nl/CN=voms.grid.sara.nl

1: MyProxy Uploader: On the left-hand side select item "4) MyProxy Servers" to add a new MyProxy server.

 

Credentials access
-    Go to the "1) Certificate / Key“ menu
-    Locate your p12 file or pem files.

Sending the proxy

-    Click "Use Certificate

-    Go to "MyProxy"

-    Make sure that your MyProxy server is selected (myproxy1.deisa.eu).

- Click "Upload"

Then enter the following information (see Figure 2)

  • Leave the Proxy Type as it is
  • Private Key password
  • MyProxy Username
  • MyProxy Password (not same as Private Key Password)

By clicking the OK button your proxy will be sent to the MyProxy Service.

 

2: MyProxy Uploader: Upload Dialogue from "Do Actions" menu.

 

Your MyProxy Username and MyProxy Password are required when you fetch your proxy.  Now you can use, for example, GSISSH-Term  from a machine which does not have certificates at hand, as long as proxy is valid on the MyProxy server.

2.5 Page 3

Recreated the page by copying text

The UK's National Grid Service (NGS) provides a Certificate Management Wizard (MyProxy Uploader) Java Web Start application. It can be run by either visiting http://www.ngs.ac.uk/tools/certwizard and then pressing the (orange) Launch button or by clicking http://tools.ngs.ac.uk/ngstools/certwizard/myproxy.jnlp (NB: the Java version will not be checked). (OlliS: Added one period here. Now seems to work (totally unrelated to the adding of the period, of course), at last.)

Alternatively, a Java jar file can be downloaded from the same URL, namely http://www.ngs.ac.uk/tools/certwizard which allows users to start the application without a browser. Using the tool will, in each case, involve the following steps to configure the MyProxy Uploader tool to use MyProxy server hosted by LRZ.

  • From the left-hand side menu (See Figure 1) click "4) MyProxy servers"
  • Click "Create New"
  • Fill as Server Host myproxy1.deisa.eu
  • Add a description into Server Name field.
  • The Server DN can be left as it is or can be set to myproxy1 using /C=DE/O=GridGermany/OU=Leibniz-Rechenzentrum/CN=myproxy.lrz.de
  • The server port is 7512.
  • Click Save button. Then the property file dialog will appear. Choose a name and click Save.

To use the other DEISA MyProxy server at SARA, employ the other possible "Server Name" myproxy2.deisa.eu where its "Server DN" is /O=dutchgrid/O=hosts/OU=sara.nl/CN=voms.grid.sara.nl

Figure 1

1: MyProxy Uploader: On the left-hand side select item "4) MyProxy Servers" to add a new MyProxy server.

Credentials access

  • Go to the "1) Certificate / Key" menu
  • Locate your p12 file or pem files.

Sending the proxy

  • Click "Use Certificate"
  • Go to "MyProxy"
  • Make sure that your MyProxy server is selected (myproxy1.deisa.eu).
  • Click "Upload"

Then enter the following information (see Figure 2)

  • Leave the Proxy Type as it is
  • Private Key password
  • MyProxy Username
  • MyProxy Password (not same as Private Key Password)

By clicking the OK button your proxy will be sent to the MyProxy Service.

Figure 2

2: MyProxy Uploader: Upload Dialogue from "Do Actions" menu.

Your MyProxy Username and MyProxy Password are required when you fetch your proxy.  Now you can use, for example, GSISSH-Term  from a machine which does not have certificates at hand, as long as proxy is valid on the MyProxy server.

Document Actions