This Section describes all steps that are necessary to install the URC.

• First get version 6.2.4 of the URC from http://www.unicore.eu/download/unicore6/:

-> Clients -> Rich Client -> Download

NB: The latest version of the URC, namely version 6.3, currently has a bug in the keystore creation process.

There different clients are available for Windows, Mac OS and Linux.

• Download the relevant package and store it locally on your computer.
• Unzip the package and execute the UNICORE_Rich_Client file
• Note: On Windows systems it might occur that you will get an error message concerning path being too long. This is solved by selecting a shorter path.

Initialisation

At start-up, the client will create a new keystore for you. The UNICORE keystore will later contain your personal Certificate and all the Certificates required to access the remote sites. First choose a path and generate an empty keystore file in the file browser (e.g. user.jks – see Figure 1 and Figure 2) and confirm the creation of the new keystore (Figure 3). Please ensure that your keystore filename has the '.jks' suffix.

Next you will be asked to create a password for the keystore (Figure 4). This password has to be typed every time the URC will be started.

After confirming the password the URC will be configured for the first session (loading Workbench). This step might take a few seconds. When the configuration is ready you will see a “Welcome”-window that contains five icons (Figure 5):

• Overview: Get an overview of the features
• First steps: Take your first steps
• Tutorials: Go through tutorials
• What’s New: Find out what is new
• Workbench: Go to the workbench

Choose any chapter you are interested in. If you want to skip the introduction then choose the Workbench icon or minimize the welcome window. This window will be available in the URC to let you check the different documentations. The first URC view will be similar to what is shown in Figure 6.

UNICORE Keystore and the Truststore

At this point, both the and the have to be populated.

The keystore contains the private part of your Certificate (which is known as the private key) and the truststore contains the public part of the Certificates of each DEISA site (which is known as the public key). The private key has been created by you in your web browser already when you made the DEISA certificate request from your national Grid-CA. If you do not have your Certificate in .p12 format, open this web browser again and export the private part of your Certificate from your browser to a local file in .p12 format. You will then be asked to provide the password you created for your private key. This is also needed in the following step.

Import the users’ private key into the URC keystore:

• Select the “Keystore” panel.
• Press to search for the private key with the upcoming file browser on your local workstation. The filter has to be set from *.jks to *.p12 (see Figure 7)
• Click on “Open”
• Provide the private keys’ password (Figure 8)
• Now the private key has been imported to the URC keystore and you should see something similar as in Figure 9.

Next, populate the URC Truststore. For this step you need all the relevant EUGridPMA certificates as provided by SARA via http://winnetou.sara.nl/deisa/certs/

=> Package with individual certs from CAcerts in gz (zip) format

Download the certificate package, store it on your local computer and extract it to a folder of your choice. Then the UNICORE truststore has to be updated with these certificates:

• Select the “Truststore” panel
• Press and select all EUGridPMA certificates from your local computer (you might mark all entries and import them at once – Figure 10
• Click on “Open”
• Now the EUGridPMA certificates have been imported into the UNICORE truststore and you should see something similar as shown in Figure 11

Next, all the DEISA resources have to be integrated into the URC. Therefore add a new Registry as shown in Figure 12 and Figure 13. The respective Registry URL is https://deisa-unic.fz-juelich.de:9111/DEISA/services/Registry?res=default_registry

All DEISA resources are recorded within this Registry. In case of any trouble with this URL, a backup registry is available at https://devel.fec.cineca.it:13303/CINECA-REGISTRY/services/Registry?res=default_registry

Double click on to refresh the URC view. Afterwards you should see all your Execution Sites (Figure 14).