How to Import Your Certificate to a Browser
Your certificate and private key must be located in the .globus directory in
your home. In the standard LCG setup your private key is found at:
~/.globus/userkey.pem and your certificate at: ~/.globus/usercert.pem.
In order to import your private key and certificate in your browser you must
create a pkcs12 bundle. This can be achieved by issuing the command:
openssl pkcs12 -export -in ~/.globus/usercert.pem -inkey \
~/.globus/userkey.pem -name "My Certificate" \
After issuing the above command, you will be asked to enter the pem pass phrase.
This is the pass phrase you entered during the initial process of creating the
certificate request. Next you will have to enter an export password for the
pkcs12 bundle and you will have to use it during the import procedure.
Transfer the pkcs12 bundle to your computer.
If you use Mozilla/Netscape follow these instructions:
Step 1 (Importing SEE-Grid CA Certificate to the browser)
Open http://www.grid.auth.gr/pki/seegrid-ca/cacert/ in your browser
Click on the link after (Import the SEE-GRID CA root certificate in your browser).
A Window will pop up. Enable the following options:
Trust this CA to identify web sites.
Trust this CA to identify email users.
Trust this CA to identify software developers
and select ok.
You have successfully imported the SEE-Grid CA Certificate into
Step 2 (Import your pkcs12 bundle to the browser)
Open a Mozilla/Netscape Window
Go to Edit->Preferences->Privacy & Security->Certificates
Click on Manage Certificates and then click on import
Browse to the pkcs12 bundle you have transfered to the computer and open the
A new window will popup.
This procedure will enable the Software Security Device in Mozilla/Netscape.
Enter a password that you will have to use when you will want to access ANY of
your private keys in the future.
In the following screen you are asked to enter the export password of the
bundle. This is the export password you entered previously.
Congratulations you have imported your certificate and private key to the