How to Import Your Certificate to a Browser
Your certificate and private key must be located in the .globus directory in
your home. In the standard LCG setup your private key is found at:
~/.globus/userkey.pem and your certificate at: ~/.globus/usercert.pem.
In order to import your private key and certificate in your browser you must
create a pkcs12 bundle. This can be achieved by issuing the command:
openssl pkcs12 -export -in ~/.globus/usercert.pem -inkey \
~/.globus/userkey.pem -name "My Certificate" \
After issuing the above command, you will be asked to enter the pem pass phrase.
This is the pass phrase you entered during the initial process of creating the
certificate request. Next you will have to enter an export password for the
pkcs12 bundle and you will have to use it during the import procedure.
Transfer the pkcs12 bundle to your computer.
If you use Internet Explorer follow these instructions:
Step 1 (Importing SEE-Grid CA Certificate to the browser)
Open http://www.grid.auth.gr/pki/seegrid-ca/cacert/ in your browser
Click on the link after (Import the SEE-GRID CA root certificate in your browser).
A Window will pop up. Click on the button open.
Select the option Install Certificate. Click on Next two times and the Finish.
Answer YES to the question "Do you want to ADD the following certificate to the
You have successfully imported the SEE-Grid CA Certificate into Internet
Step 2 (Import your pkcs12 bundle to the browser)
Open an Internet Explorer Window
Go to File->Open; Browse to the pkcs12 bundle you have transfered to the
computer and open the file.
A new window will popup. Press Next to the following two screens.
In the 3rd screen you will be asked to enter your password. This is the export
password you entered previously.
Enable "Enable strong private key protection. You will be prompted every time
the private key is used by an application, if you enable this option."
DO NOT enable "Mark this key as exportable. This will allow you to backup or
transport your keys at a later time."
Select Next in the following 2 screens and the Finish.
Select OK to the following window.
Congratulations you have imported your certificate and private key to the