Do I need a certificate? If so, KCA or DOEGrids?
Most
Fermilab users are eligible for both KCA and DOEGrids certificates:
- To get a KCA certificate from Fermilab you need to have a Kerberos principal, and obtain valid credentials.
Functions requiring user to have a KCA or DOEGrids certificate
| KCA certificate uses |
DOEGrids certificate uses |
| Accessing some Fermilab restricted-access web sites and web services (e.g., various instances of DocDB, some computer security pages) |
Accessing various restricted web sites and web services. |
| NOT usable for digitally signing email |
Digitally signing email |
Accessing grid resources (at sites where Fermilab's KCA is trusted, e.g., for FermiGrid, OSG, and somewhat beyond: our KCA is included in the EUGRID/TAGPMA distribution of certified CAs)
FermiGrid User Installation Guide |
Accessing grid resources (at sites where DOEGrids CA is trusted, e.g., for FermilGrid or OSG)
FermiGrid User Installation Guide |
Web server admins: Setting up SSL server for Apache or IIS
(besides the KCA certificate, you need a DOEGrids service certificate) |
Web server admins: Setting up SSL server for Apache or IIS
(besides the KCA certificate, you need a DOEGrids service certificate) |
| Web authors: implementing SSL (and optionally certificate authentication) on your Web site |
Web authors: implementing SSL (and optionally certificate authentication) on your Web site |
| System admins: Using the Nessus scanner |
NOT usable for the Nessus scanner at Fermilab |
