Requesting Host and Service Credentials

[ Dorian: Administrators Guide | Developers Guide | Users Guide | caGrid: Documentation Guides ]

Request a Host Certificate

In order to run secure services securely, the container hosting the services must run with a host credential. A host credential consist of a X.509 certificate and private key. Dorian provides a means for users with a grid user account to request a host credential for their services. To request a host credential complete the following steps:

1. Launch the GAARDS UI
2. Logon to the Grid using your user account.
3. From the MyAccount menu select Request a Host Certificate.  This will launch the Request a Host Certificate window.
4. From the Service URI drop down select the URI of the Dorian you wish to request a host certificate from.
5. In the Host text box, enter the name of the host you are requesting a host credentials for.
6. Next you must specify the directory on the file system where the host credentials should be written to, this can be done by clicking the Browse button.
7. Click the Request Certificate button.

Immediately after clicking the Request Certificate button, the UI will submit the host certificate request to Dorian. Upon receiving the request Dorian will either immediately approve the request or submit the request to administrator for approval. In the case where the request is immediately approved, the host credentials (certificate and private key) will be written to the directory specified. The file containing the certificate will be named THE_HOSTNAME_YOU_ENTERED-cert.pem, the file containing the private key will be named THE_HOSTNAME_YOU_ENTERED-key.pem.

My Host Certificates

In the case where host certificate request requires approval of an administrator, the file containing the private key will be named THE_HOSTNAME_YOU_ENTERED-key.pem. The host certificate WILL NOT be written since it is not issued until the request is approved. The GAARDS Admin UI provides a means of checking the status of your host certificates request(s). To check the status of a host certificate request complete the following steps:

1. Launch the GAARDS UI
2. If you have not done so, logon to the Grid using your user account.
3. From the MyAccount menu select My Host Certificates, this will launch the My Host Certificates window.
4. From the Service URI drop down select the URI of the Dorian you wish to request a host certificate from.
5. Click the Find Host Certificates button.