916 | | If you would like to run your own experiments in this infrastructure, please |
917 | | contact us at [mailto:help@geni.net] to get a permanent account. |
918 | | |
919 | | === 2. Getting to Know Omni === |
920 | | Now that you have your own account, you should configure Omni to use your own |
921 | | personal info, instead of the pre-made accounts. |
922 | | ==== 2a. Generate and Download your ProtoGENI certificate ==== |
923 | | a. Start Firefox within the VM and |
924 | | [https://www.pgeni.gpolab.bbn.com/login.php3] log in to your account. |
925 | | b. Select ''Generate SSL Cert'' and follow instructions. |
926 | | c. Select ''Download your SSL Cert'' (it's on the left of the page), and |
927 | | click on the 'Download it in PEM format' link. |
928 | | d. Copy the contents of the page (Ctrl-A, Ctrl-C) |
929 | | e. Open a terminal (there is a shortcut on the top bar) under the |
930 | | omni_tutorial directory there should be an ssh directory |
931 | | {{{ |
932 | | cd omni_tutorial/ssh |
933 | | }}} |
934 | | f. Open a file called <username>_cert.pem, paste your cert(Ctrl-Shift-V) |
935 | | and save. |
936 | | {{{ |
937 | | pico <username>_cert.pem> |
938 | | Ctrl-Shift-V |
939 | | Ctrl-X |
940 | | }}} |
941 | | g. Remove the passphrase from your certificate. For security best |
942 | | practices you should keep a passphrase on your certificate. If you want to avoid |
943 | | typing your passphrase throughout the tutorial, you might want to temporarily |
944 | | remove your passphrase |
945 | | {{{ |
946 | | openssl rsa -in ./<username>_cert.pem -out ./<username>_cert_ct.pem |
947 | | openssl x509 -in ./<username>_cert.pem >> ./<username>_cert_ct.pem |
948 | | chmod 400 ./<username>_cert_ct.pem |
949 | | }}} |
950 | | If you want a way to type your passphrase only once per session, look |
951 | | [http://trac.gpolab.bbn.com/gcf/wiki/OmniTroubleShoot#Q.WhydoesOmnipromptformyPEMpassphrasesomanytimesCantOmnipromptonlyonce |
952 | | here]. |
953 | | |
954 | | ==== 2b. Generate a pair of private/public keys. ==== |
955 | | In order to be able to login to the resources you will reserve will need a pair |
956 | | of keys. You can use any set of existing keys you might have, or you can |
957 | | generate a new pair. For security best practices you should have a passphrase |
958 | | on your keys. |
959 | | {{{ |
960 | | ssh-keygen -f <username>_key |
961 | | }}} |
962 | | |
963 | | Now you can go back to [wiki:GEC11NetworkingExperiments/Tutorial#I.ConfigureOmni |
964 | | (I)] and follow the steps using your own certificate and key. |
| 912 | If you would like to run your own experiments in this infrastructure, please contact us at [mailto:help@geni.net] to get a permanent account. Look at the [http://trac.gpolab.bbn.com/gcf/wiki/OmniConfigure Omni Configuration page] about how to configure your Omni with your personal info. |
| 913 | |