Grix

Grix is a desktop Java application that makes it easy to:

Apply for compute project membership to run pre-installed applications on the ARCS Grid.

Note: All new users should Request Quota when first getting started with the Compute Cloud, instead of using Grix. This provides a quicker turnaround for those wanting to evaluate the service, by adding the user to the ARCS Compute Cloud (ACC) compute project. To have a new compute project created for your research group, and / or to request installation of a research application at a facility, please contact Customer Service. The Project Leader of a compute project, who has control of the project and is typically a senior researcher or nominee of same, has the authority and ability to invite others to join the project, to restrict project members' privileges, or even to exclude an existing member.

Apply for a personal grid certificate ARCS is a member of the International Grid Trust Federation (IGTF). This means that grid certificates issued by ARCS are recognised internationally. A personal grid certificate is used in these scenarios:

You do not want to use the ARCS or an institutional Identity Provider (IdP)
You need to run applications from the command-line with long runtimes
You need a certificate installed in your web browser: Export/Import a certificate to a browser

Note: Do not use Grix if you are looking for server host certificates. Instead, please see: ARCS Certificate System

Access MyProxy with the ARCS or an institutional IdP

System Requirements and Starting Grix

Grix needs Java 1.5/5.0 or later. Additionally, you may need the "Unlimited Security" patch.

Australian users: Start Grix
BeSTGRID users: Start NZ version of Grix

Note: Grix is a Java webstart application and thus will not install any software onto your machine. Once the file has downloaded double click on the grix.jnlp file to start Grix.

Help Starting Grix

We encourage people to start Grix from the webstart link provided above because its easy and quick. Grix is known to work with MS Windows, Macs and Linux systems, but local rules and differing configurations can some times lead to difficulties. Let's see if you can identify your problem:

The site you are currently located at prevents the sort of network activity Webstart needs to use, or your computer configuration or security settings is blocking you. If this is the case, a good option for you is to use the appropriate kit from the downloads page
Another possibility is you don't have a suitable version of Java installed, or you don't have Java at all. Grix (and lots of other grid tools) need a current (ie. 1.5/5.0 or later) version of Java. You may need to get permission or help from your local IT authorities to do this.

Help Using Grix

Applying for Compute Project Membership (also called a group or a VO for Virtual Organisation)

Note: This should only be done after the Request Quota step has been completed, when first getting started with the Compute Cloud.

Compute Project membership can be applied for under either an IdP (ARCS or institutional IdP) or an existing personal grid certificate. There are two ways you can join an existing Compute Project:

use Grix to apply to join a selected project (instructions below)
if you know a manager of a selected project, you can contact them directly and ask them to add you

When applying for Compute Project membership using Grix, you will first need to authenticate. Click on the Authentication tab, select the type of authentication method with which you would like to apply for compute project membership (e.g. Shibboleth tab if using an IdP, or Local x509 cert to use an existing grid certificate), enter your details and click on the Authenticate button. (See the next section if you wish to apply for a grid certificate).

Then click the VOs tab to see the membership application page. Information about your membership of the ARCS VO should be displayed, along with any compute projects / groups you are already a member of. To apply to join a compute project / group, select the group and click on the Apply button. You will be required to provide an email address and you will need to wait for an administrator to approve your membership.

Note: if you only see an option to join the ARCS VO, you need to request quota first (see links above). If on the left of the screen under VO's you see "APACGrid" listed, click on the Manage VOs button and follow the instructions to drag "APACGrid" from Active VOs to In-active VOs, and click on the Apply button.

Personal Grid Certificates

When Grix first opens, it looks to see if you have a personal grid (x509) certificate in the default location. If so, it will give you some information about it, where it's from, to whom it was issued and, importantly, when it expires. If there is no certificate there, you'll be prompted to go through the steps to generate a certificate signing request (CSR), send it off, give some advice on how to get it authorised and what to do when its all done. Lets look at this, step-by-step.

Generating a CSR. A CSR is a file that Grix helps generate, you need to provide some input information and, very important, a pass phrase (minimum of 12 characters). Remember that pass phrase, as you will need it later on. Grix will send the CSR off to the Certificate Authority (CA) for you. Grix also generates another file, called a Private key, that must remain on you computer- you must never give it to anyone else.
Certificate Approval. Once Grix has sent your CSR off to the CA, it is necessary to get it signed. This involves you physically visiting one of the people that ARCS has identified as Registry Authority Operators, RAOs. The RAO will need to see some approved photo ID and, if happy, will electronically 'sign' your application. Only after it has been signed by an RAO can the certificate authority people process your request.
Collect Your Certificate. Once your certificate has been processed and you have received an email notification, you can then retrieve your certificate using Grix. This is easy; each time you start up Grix now, it will check to see if your certificate is ready to pick up. If so, it will get it for you, there and then. Just click the Retrieve button to retrieve your certificate. Once you have retrieved your certificate you will then have a folder titled .globus in your “home directory” (if using Linux or OS X) or in “C:\Documents and Settings\Your-Username” (if using Windows).
Using Your Certificate. This will depend on your particular needs, you may for example be using Grix's proxy capabilities to make proxies to later use in workflows. Alternatively, you may only use Grix from now on to check your certificate or, perhaps, to renew it in 12 months time.
Renewing Your Certificate. To renew your Grid Certificate, start Grix, click on the Renew button on the Certificate panel and follow the instructions, which are similar to the procedure for applying for a Grid Certificate outlined above.

Access MyProxy with an IdP

Many Grid applications that cannot work directly with an IdP are able to work with MyProxy. Examples include the Nimrod Portal and the command-line interface to Grisu. Grix bridges this in a straightforward way so you have a single sign-on with an IdP and subsequently you can use an application that is aware of MyProxy to retrieve your credentials, thus obviating the need for password prompts. The steps for doing this are

1. Click the Authentication tab in Grix
2. Click the Shibboleth tab
3. Select your IdP
4. Enter your IdP username and password
5. Click Authenticate
6. At the bottom of the window, click Upload

The window should appear similar to the one shown here:

Note: You will be prompted to create a temporary username and password after you click Upload. Please use a different username and password from that in Step 4. Whenever a Grid application prompts you for a MyProxy login, you should enter the temporary username and password.

More Information

Want to know more?

The Grix Project Page has a lot of indepth information, written for developers.