A Grid Account in TIFR
1: Request CERN user account
1a. Apply for new and regular CERN account at user office by filling 'New Member Registration Form'.
OR
Open a ticket at CERN Service Portal. They will guide you in this process.
NOTE:
a) In case of any problem or other modification, please contact the CMS secretariat at cms.people@cern.ch
b) Keep ready your scanned passport or Institute's ID for upload.
c) After completion of step1, you will be having your new email-id and lxplus login-id from CERN.
d) You can verify your details and modify your password etc. at users-portal.
2: Apply for User Certificate from CERN
a) Visit CERN Certification Authority to generate a User Certificate.
b) Click on "New Grid User certificate" and enter a strong password for this certificate.
c) Click on "Get Grid User Certificate" to geneate it.
d) It allows to download a certificate in .p12 format i.e. myCertificate.p12
3: Upload your certificate in browser
a) Export and import certificate with Internet Explorer
b) Export user certificate using Mozilla browser
c) Export user certificate on Mac
4: Register for CMS VOMS and sign AUP
5: Verify your login on lxplus machine
ssh login-id@lxplus.cern.ch
for e.g. ssh -v ppatel@lxplus.cern.ch # -v flag for verbose
6: Convernt your User Certificate into PEM keypairs in lxplus machine, make sure that your usercertificate (i.e. myCertificate.p12) is present in lxplus machine.
a) Extract the certificate:
openssl pkcs12 -in myCertificate.p12 -clcerts -nokeys -out $HOME/.globus/usercert.pem
b) Extract the encrypted private key:
openssl pkcs12 -in myCertificate.p12 -nocerts -out $HOME/.globus/userkey.pem
c) Set the mode of your keys:
chmod 444 $HOME/.globus/usercert.pem
chmod 400 $HOME/.globus/userkey.pem
7: Generate proxy at lxplus machine
voms-proxy-init --voms cms
8: Share your proxy output
voms-proxy-info -all
9: Send a request email to TIFR's grid team for a Grid account along with proxy output.