LIPCA

The LIP CA ROOT certificate must be installed in all systems running Globus in order to recognize the LIP user, system or service certificates.

For DataGrid and CrossGrid middleware distributions the LIP CA ROOT certificate is distributed as a Linux RPM with the name ca_LIPCA-x.y-z.noarch.rpm where x, y and z identify the version. Use the latest version of the RPM.

For old original Globus distributions follow the instructions below.

• Download the CA certificate to a file named 11b4a5a2.0 do not change the filename.
• Copy the CA certificate to the following directories:
  
  $GLOBUS_INSTALL/share/certificates
  $GLOBUS_DEPLOY/share/certificates
  
  
• Change the protection of the file to 644.
• Update the CA signing policy file by appending the following lines:
  # LIP Certification Authority
  access_id_CA X509 '/C=PT/O=LIPCA/CN=LIP Certification Authority'
  pos_rights globus CA:sign
  cond_subjects globus '"/C=PT/O=LIPCA/*"'

For manual installation in new EDG distributions follow the instructions below.

• In these releases files related with the ROOT certificates are stored in the directory /etc/grid-security/certificates therefore the files mentioned below should be stored in this directory.
• Download the CA certificate to a file named 11b4a5a2.0 do not change the filename and change the protection to 644.
• Obtain the LIP CA CRL in PEM format and copy it to a file named 11b4a5a2.r0.
• Create a file named 11b4a5a2.signing_policy and add the following lines:
  # LIP Certification Authority
  access_id_CA X509 '/C=PT/O=LIPCA/CN=LIP Certification Authority'
  pos_rights globus CA:sign
  cond_subjects globus '"/C=PT/O=LIPCA/*"'