Home › Services › Remote and Grid Computing

Grix and how to get an x509 ARCS Certificate


Also on this page - Grix Help and Grix Usage Instructions

Grix is a tool that help end users manage their x509 certificates. It is a Java Application (in fact a Java Webstart App), it runs on your desktop computer and is installed and started by clicking here. It it does not work after a few minutes, please see help section below.

Grix will:

  • Help you apply for a certificate. (after you apply you need to visit an RAO for approval.)
  • Pickup your certificate when its been processed.
  • Help you 'insert' your certificate into a browser (if you need to).
  • Help you join a Virtual Organisation.
Grix Screenshot

Want to know more ?

Requirements

Grix needs Java 1.6/6.0 or later. Additionally, you may need the "Unlimited Security" patch.

Help Installing Grix

We encourage people to install Grix from the webstart link because its easy and quick. However, due to a number of reasons, this does not always work. Grix is know to work with MS Windows, Macs and Linux systems, but local rules and differeing configurations can get in your way. Lets see if you can identify your problem -

  • The site you are currently located at prevents the sort of network activity Webstart needs to use, or your computer configuration or security settings is blocking you. If this is the case, a good option for you is to use the appropriate kit from the downloads page.
  • Another possibility is you don't have a suitable version of Java installed, or you don't have Java at all. Grix (and lots of other grid tools) need a current (ie 1.5/5.0 or later) version of Java. You may need to get permission or help from your local IT authorities to do this.

Help Using Grix

While pretty easy to use, Grix does do quite a lot and it can be initially a bit overwhelming. If you have managed to get the Grix window displayed but are unsure of what to do next, please read on -

When Grix first opens, it looks to see if you have an x509 certificate in the default location. If so, it will give you some information about it, where its from, who it was issued to and, importantly, when it expires.

If there is no certificate there, you'll be prompted to go through the steps to generate a certificate signing request (CSR), send it off, give some advice on how to get it authorised and what to do when its all done. Lets look at this, step by step.

  • Generating a CSR. A CSR is a file that Grix helps generate, you need to provide some input information and, very important, a pass phrase (min of 12 characters). Remember that pass phrase, you will need it later on. Grix will send the CSR off to the Certificate Authority (CA) for you. Grix also generates another file, called a Private key that must remain on you computer, you must never give it to anyone else.

  • Certificate Approval. Once Grix has sent you CSR off to the CA, you need to get it signed. This involves you physically visiting one of the people that ARCS has identified as Registry Authority Operators, RAOs. This is a messy but necessary step. The RAO will need to see some approved photo ID and, if happy, will electronically 'sign' your application. Only after it has been signed by an RAO can the certificate authority people process your request.
  • Collect Your Certificate. This is easy, each time you start up Grix now, it will check to see if your certificate is ready to pick up, if so, it will get it for you, there and then.
  • Using Your Certificate. This will depend on your particular needs, you may for example be using Grix's proxy capabiliies to make proxies to later use in workflows. Alternatively, you may only use Grix from now on to check your certificate or, perhaps, to renew it in 12 months time.