Acquiring Certificates for use with GSI

In order for authentication to work within Globus and GSI-enabled tools, all users and services need to have a certificate issued from a trusted certificate authority (CA).

Because the CA is the heart of the Globus/GSI authentication system, it is highly recommended that the builders of production Grids either establish their own trusted CA or use an established commercial CA.

Grid owners who have established their own CA and have documented the procedure for acquiring certificates from it are welcome to use this site to post the URL for their own users to reference. To do so, please send email to webmaster@globus.org giving the URL for the documentation.

• Instructions for NASA Information Power Grid (IPG) Users
• Instructions for NCSA/Alliance Users

If your Grid does not have its own CA, you may use the Globus CA for experimentation and testing. The Globus CA is not a true production CA and care should be taken when using certificates issued by it, particularly on production resources.

Instructions for acquiring certificates from the Globus CA are available here.