[Jlab-scicomp-briefs] New User Certificate Tool for Scientific Computing

[Jie Chen]

Dear Users,

As we announced previously, the scientific computing group has 
re-designed the authentication system used by the upcoming upgrade to 
Jasmine tape system, Auger batch system and other supporting 
applications.  Once the upgrade is complete, users must use new 
certificates to continue accessing these systems. Today, we are 
releasing the tool so that users can acquire a new certificate before 
the upgrade.

At your earliest possible convenience, please run the following command 
on a supported machine such as jlabl1.

    /site/scicomp/bin/jcert -create


The output of this command will look something like the following:

    jlabl1:~$ /site/scicomp/bin/jcert -create
    INFO - Creating keystore file /home/larrieu/.scicomp/keystore
    INFO - Generating self-signed certificate for larrieu.  This could
    take a minute or two.
    INFO - Generating certificate request
    INFO - Requesting user certificate from JLabWinCA
    Enter CUE password for JLab user larrieu

    INFO - Storing generated certificate chain
    INFO - Okay! Certificate is stored.

The result of this command will be the creation of the following file in 
your home directory.

    ~/.scicomp/keystore


This file contains your certificate.  You should never change the 
permissions on this directory or file, since the certificate stored 
within is a jlab-signed credential.  Any party gaining access to it 
would be able to use (or abuse) the scientific computing resources 
masquerading as you.  Treat it in a fashion similar to your .ssh directory.

For more information, consult the following wiki pages:

 1. https://wiki.jlab.org/cc/external/wiki/index.php/New_Jasmine#Certificates
 2. https://wiki.jlab.org/cc/external/wiki/index.php/Jcert


Please report any problems or other feedback to scicomp at jlab.org 
<mailto:scicomp at jlab.org>.  Thank you.

The Scientific Computing team.

-- 
################################################################
#     Jie Chen                                                 #
#     Scientific Computing Group                               #
#     Jefferson Lab                                            #
#     12000 Jefferson Ave                                      #
#     Newport News, VA 23606                                   #
#     757-269-5046                                             #
#     chen at jlab.org                                            #
################################################################

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://mailman.jlab.org/pipermail/jlab-scicomp-briefs/attachments/20121005/d7c9938d/attachment.html