Proxy Certificates

You will need a valid VO CMS proxy certificate in order to be able to submit jobs via CMS Connect. If you don't have a valid grid CMS user certificate, follow Section 5.1 of the CMS Offline WorkBook.

  • If you already have a valid VO CMS signed user grid certificate installed another remote machine like (usually in ~/.globus/{usercert.pem, userkey.pem}) you can simply copy them to the CMS Connect login machine. Just execute the following command from and enter the username and password to access that remote machine.

$ copy_certificates 


			This script checks if you have globus certificates or lets you
			copy them from another machine otherwise (default:
			NOTE: New certificates need to be requested first. Follow this Twiki for that:

Check for certificates in /home/yourusername/.globus


Couldn't find any certificates.
Copying certificates from another machine
Note: This requires certificates to be under the standard $HOME/.globus location

Enter hostname of machine to login:
Enter username for yourusername

Warning: Permanently added the RSA host key for IP address '' to the list of known hosts.


usercert.pem                                                                                                                                                                                                                                              100% 3526     3.4KB/s   00:00    
userkey.pem                                                                                                                                                                                                                                               100% 2009     2.0KB/s   00:01
All Done...
You can execute the following to initialize your proxy: 

voms-proxy-init -voms cms -valid 192:00

Once you have your certificates available on the submission machine, you will need to initialize the proxy with voms-proxy-init. If you don't initialize your proxy certificate by yourself, or the remaining lifetime of such certificate is short, you will be asked to type your GRID pass phrase to automatically renew your certificate while submitting your jobs.

Of course, you can also initialize your certificate by hand too. The usual command for getting your grid proxy working is:

where -valid 192:00 is the number of hours your proxy will be alive.