Frequently Asked Questions

Table of Contents

How do I renew my Agent certificate?

Go to the Agent Renewal link and follow the instructions on the webpage.

Back to Top

How do i stop certificate renewal notices?

The notices continue until about 30 days after expiration. You have to revoke old  certificates to end notifications; either your RA can do that for you, or you can do it yourself if you set up a challenge password for the certificate.

Back to Top

Can I request a certificate for myself using grid-cert-request?

No. Personal certificates must be requested using a web browser by going to DOEGrids Certificate service.

Back to Top

Can I email a personal or host/service certificate request rather than using my web browser to request/submit one?

No. Currently there is no email gateway into the request process. You must use the web by going to DOEGrids Certificate service.

Back to Top

I forgot my pass phrase. Can you please reset it to the default or call me with it or send it to me in an email?

No. The pass phrase securing your private key is only stored/managed by you. You must revoke your certificate and submit a new request. Go to the revoke link on the right to revoke your certificate and the Certificate service to request an new certificate.

Back to Top

Does the subject of my certificate request have to conform to the DOEGrids namespace? That is, does it have to be of the form OU=People, O=doegrids,DC=org?

The name space assigned by the DOEGrids PMA is designed to be organizationally/site neutral to allow support to a number of Virtual Organizations.  The structure of the Name does not imply any authorization information. No other name space will be signed by DOEGrids or its Registration Authorities.

Back to Top

My favorite web browser is XXXX. Why don't you support it?

IA number of browsers and systems have been tested, but we can not cover all.  The following table summarizes our findings.

Back to Top

I am not a part of the the Virtual Organizations listed on the Home page, can I have a certificate?

Only members of participating Virtual Organizations may be issued a Certificate, all other requests will be rejected. DOEGrids is supporting Virtual Organizations that are a part of the Department of Energy or work with DOE.  If you think your VO would like to join DOEGrids, please send an information request. There is a link for Info requests in the bar to your right.

Back to Top

I am part of a Virtual Organization listed on the Home page but there is no sponsor listed for my institution/Site. What should I do?

Please email the POC listed for your Virtual Organization  and explain in detail who you are and why you think there should be a sponsor from your institution. He/she will work with you to handle your certificate requirements or help set up a institutional/site agent for you.

Back to Top

How do I revoke my certificate?

Go to the revoke link on the right bar and follow the instructions on the webpage.

Back to Top

I am a DOEGrids agent, how do I revoke a certificate I issued?

1. Got to: https://pki1.doegrids.org:8100/ca

2. Click on "Search for certificates"

3. Enter part of the Common name field

4. Click Find

5. Look carefully at the list returned & pick out the right one.

6. Click on "Revoke", and fill in the reason

7. Click Submit

Back to Top

How do i request SSL Server Certificate request for Apache webserver?

Back to Top