Turkey Grid - How to request a certificate
From EGEE-see WIki
What is a Digital Certificate?
A digital certificate is your electronic identity to access the Grid. It is used in every authentication and authorization procedure and also ensures the confidentiality and integrity of your data that travel on the net while you are working in the Grid. Digital Certificates are issued by accredited Certification Authorities (CAs). There exists a CA in every country.
Important! Please keep in mind the Digital Certificate is strictly personal. Do not share your certificate or your private keys. Also don't give away your certificate password. If one of your colleagues or another member of your research team needs to access the Grid he/she should apply for his/her own certificate. Failure to comply with the above is considered a violation of the policies under which your certificate was issued and may lead to the certificate revocation by the issuing CA. In simple words this means that you will be banned from the EGEE infrastructure (at least until a new Certificate is issued to you).
Requesting a Certificate
Certification Authority of National Grid Initiative of Turkey (TR-Grid CA) was formed to facilitate Public Key Infrastructure (PKI) services for Turkey GRID community. TR-Grid CA is a member of European Policy Management Authority for Grid Authentication in e-Science (EUGridPMA) and it provides x509 certificates. After you read and accept the conditions and specifications stated in the CP/CPS document, you should fill in the certificate request form at the following site http://www.grid.org.tr/ca/cert_request/ and submit it to the Registration Authority (RA) through your web browser. Before you fill in the form, note that:
1. When you submit the form, the key pair of your certificate is generated in your web browser.
2. After you press "submit request" button, press "yes" on coming dialog box. Then, choose "set security level", "high" respectively, and enter your certificate name and a passphrase of at least 12 characters to protect your private key.
3. When importing your signed certificate into your web browser, it is very important that you use the same web browser that you make the request.
4. Before importing your certificate, first import the TR-Grid CA certificate from the link http://www.grid.org.tr/ca/ca_cert/1691b9ba.crt to your browser.
5. It is mandatory that you use only english characters to fill in the form.
6. After you submit your request, the private key will be stored in browser's spool.
The RA will investigate your request and send an e-mail about your application status to your e-mail address you state in the form. If you are accepted to be a valid entity, you will be required to contact the RA personally with a photo ID to authenticate your identity.
