Host certificates
From Gridkaschool
To authenticate the grid services almost all hosts have to provide a host certificate. They have to be stored at
/etc/grid-security/hostcert.pem /etc/grid-security/hostkey.pem
where the key must not have a password protection. You can request a host certificate at your national Certification Authority (CA). For Germany this is the GridKa-CA (https://gridka-ca-sec.fzk.de/).
For this course you find the right host certificates at /etc/grid-security/. Ensure the files have the right permissions:
chmod 644 /etc/grid-security/hostcert.pem chmod 400 /etc/grid-security/hostkey.pem ll /etc/grid-security/ -rw-r--r-- 1 root root 1929 Mar 6 09:07 hostcert.pem -r-------- 1 root root 887 Mar 6 09:07 hostkey.pem
