Using UABgrid Web Sites: Difference between revisions
Jpr@uab.edu (talk | contribs) (Changed the root cert links to non-https to avoid additional confusion and warnings) |
Jpr@uab.edu (talk | contribs) (Update page to support additional browsers and easier navigation) |
||
| Line 1: | Line 1: | ||
In order to use many of the services offered on UABgrid, you will need to trust the | In order to use many of the services offered on UABgrid, you will need to trust the UABgrid Certificate Authority (CA). This is accomplished by adding the [http://uabgrid.uab.edu/files/UAB-root.crt UABgrid CA's root certificate] to the list of trusted CAs recognized by your web browser or other client application | ||
== Background == | == Background == | ||
From a systems perspective, the decision to trust (ie. import) the UABgrid CA | From a systems perspective, the decision to trust (ie. import) the UABgrid CA is equivalent to deciding to "trust" a desktop computer by physically approaching it an launching application links presented in it's menus. The trust expressed through physical proximity and visual familiarity with your desktop system is expressed electronically via the PKI infrastructure leveraged by UABgrid. | ||
== | == Configure Your Web Browser to trust UABgrid CA == | ||
Internet Explorer 7 | === Internet Explorer 7 === | ||
==== Steps to Import the UABgrid root certificate ==== | |||
Begin the import of the UABgrid CA by [http://uabgrid.uab.edu/files/UAB-root.crt clicking here to load the UABgrid CA root certificate] with your browser. This should begin the certificate import process. | |||
The | The first dialog you see will be the following warning. This message is simply saying that IE7 doesn't recognize the publisher of this certificate. This is the expected response and is the reason we are following these steps. Press "Open" to open the certificate. | ||
[[Image:Ie7-unknown-publisher.jpg]] | [[Image:Ie7-unknown-publisher.jpg]] | ||
This | The next dialog is the actual import step. This dialog also uses very strong wording urging caution. This warning is saying that once you trust this CA, IE7 will no longer warn you about sites that use certificates issued by the UABgrid CA. This is what we want to achieve. But to assure you are actually looking at the real UABgrid CA, you should confirm that the "Thumprint" number shown in the middle of the dialog contains the unique signature of the "UABgrid CA v1.0": <code>(sha1): DDBB73C6 0FE21B5B B1DAE981 C8D5B502 C0861431</code> | ||
[[Image:Ie7-ca-import-warning.jpg]] | |||
If the Thumbprint is correct, you may click "Yes" to complete the import. | |||
The UABgrid CA v1.0 root certificate is now imported into your browser. | |||
'''NOTE 1:''' IE7 must now be restarted completely (close all IE7 windows) in order for it to properly recognize UABgrid sites without warnings. | |||
'''NOTE 2:''' If you don't close all your IE7 windows, IE7 will display a light red warning background in the location box for sites that use a UABgrid certificate. This warning indicator will go away once IE7 is completely restarted. | |||
==== What you See if you don't trust the UABgrid CA ==== | |||
Internet Explorer 7 will present the following warning message when you attempt to use a secure connection to access a UABgrid web site that uses a UABgrid CA certificate. More technically, the error occurs when you use use HTTPS (SSL) connections to access a web site that identifies itself using a certificate issued by the UABgrid CA. | |||
IE7 | While you can ignore this error and proceed even though IE7 cautions against this, you will continue to get these annoying warnings whenever you access such a site. The better solution is to tell IE7 to trust the UABgrid CA as described above. This will allow smooth access to all sites identified by UABgrid. | ||
[[Image:Ie7-unknown-ca.jpg]] | |||
Revision as of 10:50, 15 March 2010
In order to use many of the services offered on UABgrid, you will need to trust the UABgrid Certificate Authority (CA). This is accomplished by adding the UABgrid CA's root certificate to the list of trusted CAs recognized by your web browser or other client application
Background
From a systems perspective, the decision to trust (ie. import) the UABgrid CA is equivalent to deciding to "trust" a desktop computer by physically approaching it an launching application links presented in it's menus. The trust expressed through physical proximity and visual familiarity with your desktop system is expressed electronically via the PKI infrastructure leveraged by UABgrid.
Configure Your Web Browser to trust UABgrid CA
Internet Explorer 7
Steps to Import the UABgrid root certificate
Begin the import of the UABgrid CA by clicking here to load the UABgrid CA root certificate with your browser. This should begin the certificate import process.
The first dialog you see will be the following warning. This message is simply saying that IE7 doesn't recognize the publisher of this certificate. This is the expected response and is the reason we are following these steps. Press "Open" to open the certificate.
The next dialog is the actual import step. This dialog also uses very strong wording urging caution. This warning is saying that once you trust this CA, IE7 will no longer warn you about sites that use certificates issued by the UABgrid CA. This is what we want to achieve. But to assure you are actually looking at the real UABgrid CA, you should confirm that the "Thumprint" number shown in the middle of the dialog contains the unique signature of the "UABgrid CA v1.0": (sha1): DDBB73C6 0FE21B5B B1DAE981 C8D5B502 C0861431
If the Thumbprint is correct, you may click "Yes" to complete the import.
The UABgrid CA v1.0 root certificate is now imported into your browser.
NOTE 1: IE7 must now be restarted completely (close all IE7 windows) in order for it to properly recognize UABgrid sites without warnings.
NOTE 2: If you don't close all your IE7 windows, IE7 will display a light red warning background in the location box for sites that use a UABgrid certificate. This warning indicator will go away once IE7 is completely restarted.
What you See if you don't trust the UABgrid CA
Internet Explorer 7 will present the following warning message when you attempt to use a secure connection to access a UABgrid web site that uses a UABgrid CA certificate. More technically, the error occurs when you use use HTTPS (SSL) connections to access a web site that identifies itself using a certificate issued by the UABgrid CA.
While you can ignore this error and proceed even though IE7 cautions against this, you will continue to get these annoying warnings whenever you access such a site. The better solution is to tell IE7 to trust the UABgrid CA as described above. This will allow smooth access to all sites identified by UABgrid.
