10 | | 2. Now get the GMOC public gpg key. |
11 | | {{{ |
12 | | gpg --keyserver pgp.mit.edu --recv-keys 0x9E375519 |
13 | | }}} |
14 | | 3. Now validate the key: |
15 | | {{{ |
16 | | gpg --fingerprint 0x9E375519 |
17 | | }}} |
18 | | The return value should be something like: |
19 | | {{{ |
20 | | pub 2048R/9E375519 2012-01-24 [expires: 2017-01-22] |
21 | | Key fingerprint = 5AC8 5C7F D3A6 94A7 52E5 4778 F9D9 273B 9E37 5519 |
22 | | uid GMOC At GlobalNOC <gmoc@grnoc.iu.edu> |
23 | | sub 2048R/31977D79 2012-01-24 [expires: 2017-01-22] |
24 | | }}} |
25 | | The value to check is the fingerprint: it should match: |
26 | | {{{ |
27 | | 5AC8 5C7F D3A6 94A7 52E5 4778 F9D9 273B 9E37 5519 |
28 | | }}} |
29 | | 4. Now generate a password file: Generate a new password for your organization, and save it on a single line as a text file. Password requirements: at least 12 characters (no unicode) , no spaces(or tabs) or ':'. |
| 5 | `openssl passwd -apr1 -stdin < /usr/local/etc/monitoring_passwd` |
31 | | 5. Now we encrypt the file |
32 | | {{{ |
33 | | gpg -ea -r gmoc@grnoc.iu.edu $PASSWORD_FILE |
34 | | }}} |
35 | | You are most likely going to get a warning like this: |
36 | | {{{ |
37 | | gpg: 31977D79: There is no assurance this key belongs to the named user |
38 | | |
39 | | pub 2048R/31977D79 2012-01-24 GMOC At GlobalNOC <gmoc@grnoc.iu.edu> |
40 | | Primary key fingerprint: 5AC8 5C7F D3A6 94A7 52E5 4778 F9D9 273B 9E37 5519 |
41 | | Subkey fingerprint: CACD FC41 8A79 7E6A 981B 8AD1 EB15 4877 3197 7D79 |
42 | | |
43 | | It is NOT certain that the key belongs to the person named |
44 | | in the user ID. If you *really* know what you are doing, |
45 | | you may answer the next question with yes. |
46 | | |
47 | | Use this key anyway? (y/N) |
48 | | }}} |
49 | | Say yes. A file named with the same name as the password file but with an appended '.asc' extension should have been created. |
50 | | |
51 | | 6. Send the encrypted file (the one ending in .asc) to gmoc@grnoc.iu.edu. Please: |
| 7 | 1. Send the hash to gmoc@grnoc.iu.edu. Please: |