The RWTH registration authority processes applications for DFN-PKI Grid user certificates.

• The DFN-PKI Grid-Portal must be used to apply for a new Grid user certificate, revoke an existing one, or search for one.
• The certificate application is submitted to and approved by the RWTH Registration Authority (RA).
• The certificate is issued by the DFN-PKI Grid and can be downloaded via your web browser after receiving an email notification.

A Grid user certificate is valid for 393 days.

Applying for a Grid user certificate via the web form

1. Open the DFN-PKI Grid-Portal and change the language to English at the top right if needed
2. Select Request User Certificate
3. Fill out the fields as follows:

• Create certificate request
  • Name (CN): Complete first name(s) and surname as they are displayed in your identity document.
  • Email: Email address for which the certificate is to be issued.
  • Organisational unit (OU) (optional): The complete name of your department or organisational unit. (e.g. IT Center, Computer Science 12)
  • Namespace: This is already set.
• Your data
  • Department (optional) The complete name of your department or organisational unit. (e.g. IT Center, Computer Science 12)
  • Revocation PIN: This PIN will be required to revoke or block certificates. Please keep this PIN safe.
• Personal Note (optional): This note can be saved in the .json file that you create with your application.
• You must agree to the regulations.
• You must agree to the publication of the certificate.
• You must confirm that you have read the information about how your data will be processed.

4. Save the application file and set a password for it

• The .json file and associated password must be stored securely. You will later need both to be able to generate your .p12 file.

5. Print the PDF file

• Please read the printed document, then fill in the date and sign it.
• You must bring the completed document with you to the registration authority.

6. Submit your application in person.

The DFN-PKI certification guidelines require that the identity of the person applying for a certificate is checked. Please use one of the possible methods for identity verification.