CA Migration

Transition to CERN CA

US ATLAS has ceased to use OSG-supplied user certificates, in favor of certificates issued by the CERN certificate authority (CA). US ATLAS encourages you to https://ca.cern.ch (if you don't yet have one), and How to Add Certificates to a VO Membership.

Throughout the transition and beyond, OSG certificates issued by DigiCert will remain valid and honored until their stated expiration dates.

CERN certificate eligibility

The https://ca.cern.ch/ca/Help/?kbid=021001 shows the CERN affiliation types and stipulations that enable CERN login accounts to request certificates from the CERN CA. You can check your account on https://ca.cern.ch/ca/certificates/CheckAccount.aspx. More information is available on http://wlcg.web.cern.ch/getting-started/certificates.

Note : the Chrome browser is not officially supported by CERN, and may return an error when used with the CERN CA service (e.g., 'Key not valid for use in specified state.'). To mitigate these errors, clear any browser cookies associated with the domain 'ca.cern.ch', and then access the CERN CA site again.