NCSA's MyProxy Server

National Center for Supercomputing Applications

University of Illinois at Urbana-Champaign

NCSA runs a production MyProxy server available for general use on myproxy.ncsa.uiuc.edu, a dedicated server machine that is monitored 24/7. You're welcome to use NCSA's MyProxy server instead of deploying your own. You might find it particularly useful for testing, before setting up your own server.

The NCSA MyProxy server is integrated with the NCSA CA. NCSA users can enter their NCSA Kerberos password at the myproxy-logon (or myproxy-get-delegation or Java CoG myproxy anonget) password prompt to retrieve a short-lived certificate from the NCSA CA, without needing to run myproxy-init or ncsa-cert-request. The server will also accept one-time password (OTP) authentication for those with NCSA OTP tokens. Simply enter the password from your OTP token at the "MyProxy pass phrase" prompt instead of your NCSA Kerberos password.

Please note that myproxy.ncsa.uiuc.edu and myproxy.teragrid.org are now different servers. Please see the TeraGrid MyProxy Server page for more information about myproxy.teragrid.org.

The current software version running on myproxy.ncsa.uiuc.edu is v5.7 May 2012. We believe this server is compatible with the following clients:

NCSA MyProxy v0.2alpha3 (11 Oct 2000) and later
Java CoG 1.1

The MyProxy server collects anonymous usage statistics. See Privacy Policy for details.

The MyProxy server is configured to enforce minimal passphrase quality, which will result in errors if you choose a passphrase that is too short or contains only dictionary words, for example.

The MyProxy server will issue certificates good for up to 11 days (264 hours). To request a certificate with longer lifetime than the default, use the -t option such as myproxy-logon -t 264 or myproxy anonget -t 264.

To use the NCSA MyProxy server, you must have the NCSA CA certificates installed on your client machine, so it can verify the server's host certificate. Download 9b95bbf2.0 and 9b95bbf2.signing_policy and place these two files in /etc/grid-security/certificates/. Or you can install them using myproxy-logon -T or myproxy-get-trustroots.

The MyProxy server will accept credentials from all TeraGrid Certificate Authorities accepted by TeraGrid. See the Accessing TeraGrid Overview for more information about using MyProxy and certificates on TeraGrid.

Please contact help@ncsa.uiuc.edu with any questions about the NCSA MyProxy server.