Requesting Host/Service Credentials

[ Dorian: Administrators Guide | Developers Guide | Users Guide | caGrid: Documentation Guides ]

Request a Host Certificate

In order to run secure services securely, the container hosting the services must run with a host credential. A host credential consist of a X.509 certificate and private key. Dorian provides a means for users with a grid user account to request a host credential for their services. To request a host credential complete the following steps:

1. Launch the GAARDS UI
2. Logon to the Grid using your user account.
3. From the MyAccount menu select Request a Host Certificate, this will launch the Request a Host Certificate window.
4. From the Service URI drop down select the URI of the Dorian you wish to request a host certificate from.
5. In the Host text box, enter the name of the host you are requesting a host credentials for.
6. Next you must specify the directory on the file system where the host credentials should be written to, this can be done by clicking the Browse button.
7. Click the Request Certificate button.

Immediately after clicking the Request Certificate button, the UI will submit the host certificate request to Dorian. Upon receiving the request Dorian will either immediately approve the request or submit the request to administrator for approval. In the case where the request is immediately approved, the host credentials (certificate and private key) will be written to the directory specified. The file containing the certificate will be named THE_HOSTNAME_YOU_ENTERED-cert.pem, the file containing the private key will be named THE_HOSTNAME_YOU_ENTERED-key.pem.

My Host Certificates

In the case where host certificate request requires approval of an administrator, the file containing the private key will be named THE_HOSTNAME_YOU_ENTERED-key.pem. The host certificate WILL NOT be written since it is not issued until the request is approved. The GAARDS Admin UI provides a means of checking the status of your host certificates request(s). To check the status of a host certificate request complete the following steps:

1. Launch the GAARDS UI
2. If you have not done so, logon to the Grid using your user account.
3. From the MyAccount menu select My Host Certificates, this will launch the My Host Certificates window.
4. From the Service URI drop down select the URI of the Dorian you wish to request a host certificate from.
5. Click the Find Host Certificates button.

This will list all the host certificates that are bound to your user account. For each host certificate listed you will see the current status (Active, Suspended, Rejected, Pending, Suspended) of that host certificate. If the status of your certificate request is Pending your request has not yet been reviewed administrator. If the status is Rejected your request was rejected and a host certificate will not be issued. If the status is Active your request was approved by an administrator and you certificate is ready to be downloaded. To download and save your certificate to the file system please complete the following steps:

1. Select the certificate from the table at the bottom of the My Host Certificates window.
2. Click the View Host Certificate button, this will bring up a window containing the details for the selected host certificate.
3. Click the Certificate tab.
4. Click the Save Certificate button, this will bring up a file browser window.
5. Browse to the directory you initially specified when you made the certificate request
6. In the File name: text field enter THE_HOSTNAME_YOU_ENTERED-cert.pem
7. Click the Save button.