Certificate Procedures

Personal ("User") Certificates:

1. If you are employed by FNAL, skip straight to step 3 below, but in step 4, use FNAL for the affiliation/registration authority.
2. Contact a member of the USCMS certificate team. This person should be as local as possible (preferably within your home institution). You'll need to contact them in a manner than can be authenticated -- via phone, video, or face-to-face; e-mail is not acceptable for this purpose since you can't yet digitally sign it! Let them know that you are requesting a personal certificate and that they should expect to hear from a OSG Registration Authority in the near future. (After completing - Please continue on to Step 3.)
3. Go to DOEGrids CA import and follow the instructions to import DOEGrids as a Certificate Authority into your browser. You only need to do this once.
4. Go to DOEGrids PKI and click on "New User" under the enrollment tab. Fill out the appropriate fields; the affiliation/registration authority field should be OSG, the VO Name is CMS, and your sponsor is the member of the USCMS certificate team that you contacted. In the comments section, add "USCMS".
5. Be patient. The OSG Registration Authority needs to verify that you are who you say you are before they are allowed to issue a certificate.
6. If your certificate was rejected: was the sponsor you listed on the USCMS certificate team? If so, did you contact them to let them know you were going to request a certificate?

Host and Service Certificates:

• Go to DOEGrids and click on "Grid or SSL Server" under the enrollment tab. Fill out the appropriate fields; the affiliation/registration authority field should be OSG. Additionally, in the comments section, you must enter "USCMS".