Compact instructions for LARP database DOEGrid Certificate for MAC and
PC

Jean Slaughter -- August 31, 2005

(Mod., Mike Syphers -- August 31, 2005)

(Mod., Jean slaughter -- September 1, 2005)

General comments

1.  This certificate is good for 1 year.

2.  Once you get this certificate, you can import into other browsers on
    the same or other machines by exporting it to a file and then
    importing into another browser.

3.  At this time, Mac Users should use Firefox (free download from
    [http://www.mozilla.org](http://www.mozilla.org/) ) as Safari and
    Internet Explorer do not work with the certificate web site.

4.  At this time, only Internet Explorer has been tested on PCs. Firefox
    should work

5.  Please let Jean Slaughter ( <slaughter@fnal.gov>) if you find any
    problems with theses instructions and have suggestions as to how
    they can be improved. The goal here is simplicity.

Recipe

1.  Get the certificate

    a.  Close all browsers and reopen a window with these instructions.
        Open a second window with the instructions as the one in which
        you will do the actual clicking.

    b.  Go to [http://pki1.doegrids.org](http://pki1.doegrids.org/) and
        select "enrollment" tab.

    c.  Select "New user" on the left hand side.

    d.  Fill in the form

        i.  Get the optional password.

        ii. The person entered under "supervisor" receives email when
            you are granted the certificate. They are not asked to
            approve or disapprove before the certificate is granted.

        iii. Under Public/Private key information", select 2048(High
             grade) for Mozilla/Firefox/Netscape. For Microsoft, select"
             "Strong Cryptographic Provider".

    e.  click "submit."

    f.  click "yes" to the dialog box that asks you if you trust the
        site. Your browser page should say "Request successfully
        submitted." Note the request number.

    g.  You will get email notification that you got it or were refused.
        If you don't get email in 24 hours, call the helpdesk, 2345.
        They will want the request number.

2.  Import the certificate into your browser -- first time

    a.  Use the same machine, same user account, same browser *(what
        does same machine mean here- IP address?)*

    b.  Open the link in the email.

    c.  Click on "import the certificate" at the bottom of the page of
        letters and numbers.

    d.  In Firefox, if you have set a Master Password on your Software
        Security Device, you might get a dialog box that asks for it.

    e.  Click "OK" when asked if you trust this site.

    f.  You should get a dialog box "Certificate successfully imported."
        Click OK.

3.  Save the certificate in case you need it for something else or
    another browser -- use the instructions at
    <http://security.fnal.gov/pki/Get-Personal-DOEGrids-Cert.html> if
    you think you need this. You should not get multiple DOEGrid
    certificates. *(Is this true?)*

4.  If you want, test your certificate by going to
    <http://security.fnal.gov/pki/browsercerttest.html> and following
    the instructions.

5.  Get your certificate registered with the LARP document database

    a.  In a browser that has had your certificate imported, go to the
        LARP document database page: <http://larpdocs.fnal.gov/>

    b.  Click "Private LARP documents"

    c.  You'll get a window "choose a digital certificate"

    d.  Pick the DOEGrid one if you have more than one. Click "OK"

    e.  You'll get a message "You have presented a valid certificate,
        but are not yet authorized to access the Docdb." Click on the
        link just below the message "Apply for..." This is to register
        your certificate in the database.

    f.  A form will appear -- you just need to enter your email and
        "submit." There is a comments box which you can use to swear at
        the system.

    g.  Someone should authorize you within a few hours during working
        hours. Send email to <larpdb-admin@fanl.gov> if you don't hear
        anything within a day.