• On which NCSA production machines is the certificate software installed?
• I had to fax a copy of my institutional ID to get an Alliance certificate. What is the new fax number?
• I forgot my passphrase. What do I do?
• My certificate has expired. How do I renew it?
• How am I affected by the closing of the Alliance CA?

On which NCSA production machines is the certificate software installed?

I had to fax a copy of my institutional ID to get an Alliance certificate. What is the new fax number?

There is no new fax number. You do not have to fax anything to receive a certificate from the NCSA CA. Your NCSA Kerberos password is what verifies who you are.

I forgot my passphrase. What do I do?

Just run ncsa-cert-request with the -force option. This will revoke the current certificate and request a new one overwriting the current certificate files.

My certificate has expired. How do I renew it?

Just run ncsa-cert-request with the -force option. This tells it to overwrite the current certificate files.

How am I affected by the closing of the Alliance CA?

If you have a certificate from the Alliance CA, you can continue using it until it expires or the remote machine no longer accepts certificates issued by the Alliance CA. NCSA will accept Alliance certificates until they expire.

When your Alliance certificate expires, you'll need to get one from the NCSA CA. The request software on the NCSA machines will automatically use the new NCSA CA. If you do not have an NCSA Kerberos password, you'll need to find another CA from which to get a certificate. Check with the admins of the remote machines to which you want to use a certificate to authenticate to see what certificates they will accept.

If you are running grid services on your machine, you'll need to get the new NCSA CA certificate and install it on your machine in order to accept NCSA user certificates.