Resources > Obtaining X.509 Certificates from the USC Grid

Log in to dc-user2.

Source the NMI setup script:

$ source /cluster/nmi/default/setup.csh 

Obtain a kerberos ticket (using your USC password):

$ kinit 
Password for rynge@ISD.USC.EDU: 
$ klist 
Valid starting Expires Service principal 
02/28/04 23:19:13 02/29/04 09:19:13 krbtgt/ISD.USC.EDU@ISD.USC.EDU 

Convert the kerberos ticket to a user certificate:

$ kx509 
$ kxlist -p 
Service kx509/certificate 
 issuer= /C=US/ST=California/L=Los Angeles/ 
  O=University of Southern California/CN=usc.edu 
 subject= /C=US/ST=California/L=Los Angeles/ 
          O=University of Southern California/OU=usc.edu/
          CN=rynge/USERID=rynge/Email=rynge@USC.EDU 
 serial=0171
 hash=6204ee42 

Verify the certficate with grid-proxy-info:

$ grid-proxy-info 
  subject : /C=US/ST=California/L=Los Angeles/O=University of ... 
  issuer : /C=US/ST=California/L=Los Angeles/O=University of ... 
  identity : /C=US/ST=California/L=Los Angeles/O=University of ... 
  type : end entity credential 
  strength : 512 bits 
  path : /tmp/x509up_u4017 
  timeleft : 9:56:37