Certificates at Fermilab

Fermilab VOs, web hosts and services that rely on DOEGrids certificates are in the process of transitioning to use a new CA before March 23, 2013, when the DOEGrids certificate authority stops issuing new certificates. Information and documentation for Fermilab personal and service certificate users will be posted at http://security.fnal.gov/pki-transition/.

Overview 

• What is a certificate and what is it used for?
• Overview of using certificates at Fermilab
• What is a CA certificate?
• Do I need a certificate and if so what type?

KCA certificate 

• How do I get a KCA certificate?
  • Windows
  • Mac
  • Linux
• How do I test and troubleshoot my KCA certificate problems?
• How do I import a KCA certificate into a browser?
• How do I export a KCA certificate into a file?

OSG certificate 

• How do I get an OSG certificate?
• How do I test and troubleshoot my OSG certificate problems?
• How do I import an OSG certificate into a browser?
• How do I export an OSG certificate into a file?

DOEGrids certificate 

• DOEGrids will cease operations on March 23, 2013 and will not longer issue new or renewal certificates as of that date.
• Information about DOEGrids certificate can be found on this page.

Related Links and Advanced Topic

• Certificate Authority (CA) certficates
• Trusting certificates and downloading CA certificates
• Certificate content, certificate store and certificate file format
• Computer security concepts for understanding certificates
• How to import and export certificates using various OSes and applications
• How to use certificates to access SSL-restricted webpages
• Fermilab KCA Certificate Policy and Certification Practices Statement