Secure Infrastructure Deployment

From D4Science Wiki
Jump to: navigation, search

Secure Node configuration

In order to deploy a "secure" node on the infrastructure the following steps are needed:

  • Installation of an host certificate ( by default under /etc/grid-security)
  • EGI TrustAnchor installation ( https://wiki.egi.eu/wiki/EGI_IGTF_Release)
  • fetch-crl command installation:
    • Redhat via yum : yum install fetch-crl
    • Debian/Ubuntu : apt-get install fetch-crl

GHNs and Tomcats

gHN Scope VOVirtual Organization;/VREVirtual Research Environment. Services
CNR
node2.tsec.d4science.research-infrastructures.eu:8443 VOVirtual Organization; secureVO IS-IC
node3.tsec.d4science.research-infrastructures.eu:8443 VOVirtual Organization; secureVO IS-Registry/IS-Notifier
node4.tsec.d4science.research-infrastructures.eu:8443 VOVirtual Organization; secureVO Resource Manager
Tomcat Scope VOVirtual Organization;/VREVirtual Research Environment. Services
CNR
node1.tsec.d4science.research-infrastructures.eu:8080 VOVirtual Organization; secureVO SOA3
shibboleth-idp.tsec.d4science.research-infrastructures.eu:8080 VOVirtual Organization; secureVO Shibboleth-IDP , ARGUS
shibboleth-sp.tsec.d4science.research-infrastructures.eu:8080 VOVirtual Organization; secureVO Shibboleth-SP
portal.tsec.d4science.research-infrastructures.eu:8080 VOVirtual Organization; secureVO Portal