Host certificates

To authenticate the grid services almost all hosts have to provide a host certificate. They have to be stored at

/etc/grid-security/hostcert.pem
/etc/grid-security/hostkey.pem

where the key must not have a password protection. You can request a host certificate at your national Certification Authority (CA). For Germany this is the GridKa-CA (https://gridka-ca-sec.fzk.de/).

For this course you find the right host certificates at /etc/grid-security/. Ensure the files have the right permissions:

chmod 644 /etc/grid-security/hostcert.pem
chmod 400 /etc/grid-security/hostkey.pem

ll /etc/grid-security/
 
-rw-r--r--  1 root root  1929 Mar  6 09:07 hostcert.pem
-r--------  1 root root   887 Mar  6 09:07 hostkey.pem