The Grid user certificate proves the identity of the holder - similar to a passport. User usually only hold/need one Grid user certificate.
The VO membership is a kind of visa to utilize Grid resources. A user can be member of many VOs with their certificate.
If you do not have your Grid user certificate, start from the section 1.
If you have already obtained your Grid user certificate but have not imported it into the browser, go to section 2.
If you have already imported your Grid user certificate into your browser but do not have belle VO membership yet, go to section 4.
If you have already obtained your Grid user certificate, go to the section 2.
You need to obtain a Grid user certificate from your local certification authority (CA).
The procedure may be different in each country. If you are not familiar with it, please ask someone who has already requested a Grid user certificate.
If you cannot find the proper Grid CA in your country in the table, please contact the Belle II computing coordinator (takanori.hara_AT_kek.jp)
The password you type in when requesting a Grid user certificate will be needed later. Since it is private, only you know it, please note it!
Depending on the CA, you may get your Grid user certificate in one of the following formats;
In case your certificate is provided in PEM format, you need to convert it to PKCS12 format (e.g. KEK Grid CA case)
In case your certificate is provided in PKCS12 format, follow section 3 to load it into you web browser
In case your certificate is already installed in your browser, follow section 4 to get your belle VO membership.
If you already have your certificate loaded into your web browser, you can skip this section.
You need to load your grid user certificate into your web browser if it is obtained in a file format and not automatically loaded onto the browser.
Now you must have your certificate in PKCS12 (.p12) format, you can import it into your web browser. The way to import it depends on the browser. This page can help you.
If you get your certificate from KEK GRID CA, please follow this instructions.
Some further information how to work with certificates can for example be found here.
First, make your browser trust the KEK GRID CA:
Then, go to the VOMS page: https://voms.cc.kek.jp:8443/voms/belle (NOT 'belle2.org')
inform the DIRAC admin that your DN was replaced (find the instructions here (red letter): Computing GettingStarted#6.FindyourDistinguishedName(DN))
If you cannot connect to the VOMS page, check if you can connect to http://voms.cc.kek.jp
If you cannot connect to the VOMS page with some security error (e.g. "Secure Connection Failed"), please verify that the KEK GRID CA certificate is installed to your browser as a Certificate Authority, and its expiration date is 2025/11/25. You may get more information if you need more help from the computing coordinator (takanori.hara_AT_kek.jp)