h1. Submit Grid Job

*======================== DRAFT ===============================*

First you need to create a Personal Certificate according to this help: [[Obtain_the_Personal_Certificate]]

Then you need to Join to the fgi.csc.fi Virtual Organization. You use the same machine and Browser for obtaining both the 

certificate and for joining the VO:

Go to page https://voms.fgi.csc.fi:8443/voms/fgi.csc.fi, fill the form and submit it.

Once you have sent your application you need to wait until it has been processed after which you'll get an email how to proceed.

*1. Extract the Personal Certificate.*

Your Personal Certificate is stored into the Web Browser where you created it. To extract it for Grid usage proceed as follows:

Locate the certificate in your Browser. It's placed under something like "Preferences" => "Advanced" => "Certificates" => "View Certificates" => "Your Certificates".

For example the Certificate in Firefox for OSX looks the following:

https://p55cc-redmine.utu.fi/attachments/download/6/cert_help.tiff

It's hard to tell where it is stored as there are too many different Browsers and versions, but the name of the Certificate should be TERENA and your name and email must be part of the Certificate.

Now "Backup" or "Export" the Certificate, or whatever options you have to Extract the Certificate into a file.

You will be asked filename into which the Certificate shall be stored. Give some name, for example user.p12

Select “File type” as PKCS12 for the Certificate file.

Then you will be asked to create a password, invent a reasonable password and remember it (you will need it later).

Once you have entered the password the Certificate will be stored into the given file. The file consist of the Certificate and an associated private key. These two items will be separated into two files next.

The PEM formatted certificate consists of two files: private key file (userkey.pem) and certificate file (usercert.pem). The certificate private key is created with the command:

openssl pkcs12 -nocerts -in usercert.p12 -out userkey.pem

When executed, this command will ask for the old and the new key passwords (they can be the same). The user certificate file is created with the command :

openssl pkcs12 -clcerts -nokeys -in usercert.p12 -out usercert.pem

The commands above should have created two files, usercert.pem and userkey.pem. To use the ARC middleware these two files should be moved into a .globus sub-directory under the user's home directory (note the dot as the first character of the directory name). If the .globus directory does not exist, it can be created with the command:

mkdir ~/.globus/

After this, the certificate files can be moved to the .globus directory with the commands:

cp usercert.pem ~/.globus/

cp userkey.pem ~/.globus/

Finally, make sure that the access permissions of the userkey.pem file are set up correctly. The command to ensure this is:

chmod 400 ~/.globus/userkey.pem