Security: Domains other than xsede.org

If you want to obtain a certificate for a server that is not in the *.xsede.org domain, (e.g., for compliance with Globus "strict mode") you may be able to obtain a certificate from another source.

First, check the list of InCommon Certificate Service Subscribers to see if your organization is partnered with InCommon for server certificates. If not, check the list of InCommon Participants to see if your organization is currently a member of InCommon.

Next, check the list of Identity Providers (IdPs) and Service Providers (SPs) to find contact information for administrators at your organization. Ask if your organization can provide you with InCommon SSL Certificates. You may want to specify "InCommon IGTF Server Certificate" if you plan to use your certificate with XSEDE grid computing resources. Every organization has different policies for issuing certificates, so you will need to consult your organization's administrators for details.

Known External Certificate Providers

Below are listed resources for various known organizations and associated domains. This list is not exhaustive and may be expanded as new sources are found.

Carnegie Mellon University
For servers in the .cmu.edu and .psc.xsede.org domains, contact CMU's Computing Services.

Cornell University
For servers in the *.cornell.edu domain, IT@Cornell can provide no-cost SSL server certificates.

Dark Energy Survey
For servers in the *.cosmology.illinois.edu domain, see NCSA Certificate Requests.

Georgia Tech
For servers in the .gatech.edu and .gatech.xsede.org domains, contact the Georgia Tech Certificate Authority.

Indiana University
For servers in the .iu.edu and .iu.xsede.org domains, see Protect IU Certificates.

Louisiana State University
For servers in the .lsu.edu and .cct-lsu.xsede.org domains, contact the LSU ITS Help Desk.

Michigan State University
For servers in the *.msu.edu domain, see http://tech.msu.edu/ssl-cert/.

National Center for Supercomputing Applications (NCSA)
For servers in the .ncsa.illinois.edu, .ncsa.edu, and *.ncsa.xsede.org domains, see NCSA Certificate Requests.

Open Science Grid (OSG)
For Virtual Organizations (VOs) of the Open Science Grid (OSG), OSG may be able to provide host certificates. Contact osg-ra@opensciencegrid.org for more information.

Purdue University
For servers in the .purdue.edu and .purdue.xsede.org domains, see https://www.purdue.edu/apps/account/IAMO/InCommonCert.jsp.

University of California at San Diego
For servers in the .ucsd.edu and .sdsc.xsede.org domains, contact Information Technology Services.

University of Chicago
For servers in the *.uchicago.edu domain, see https://answers.uchicago.edu/page.php?id=19441.

University of Illinois
For other servers in the .illinois.edu domain (except for .ncsa.illinois.edu and *.cosmology.illinois.edu), the CITES Certificate Service can provide certificates for a small fee.

University of Tennessee at Knoxville
For servers in the .utk.edu and .nics.xsede.org domains, contact the OIT HelpDesk or send email to certmgr@utk.edu.

University of Texas at Austin
For servers in the .utexas.edu and .tacc.xsede.org domains, see https://wikis.utexas.edu/display/ISO/InCommon+Digital+Server+Certificates.

Not Listed

Need assistance? Submit a ticket at https://www.xsede.org/web/xup/help-desk (or send email to help@xsede.org) with the following information:

Category: Certificates
System: (Unknown / Not Applicable if system not listed)
Subject: InCommon Server Cert
Problem Description: Please help me obtain an InCommon Server Cert for example.edu.

Last Update: April 6, 2016

Key Points
We can only issue certificates for xsede.org domains.
Most educational institutions can issue these certificates for their domains locally.
Related Links
Contact Information