Certificate renewal/replacement
The identity vetting ceremony must be repeated every three years. At any other time you can contact your RA (who will simply forward the request to SWITCHpki), or even directly request a new certificate (without your RA's intervention/involvement) by sending an e-mail ** to the SWITCHpki RA at pki@switch.ch.
Notice that a warning e-mail will be sent to you one month before the expiration date of your currently valid long lived grid user certificate:
- In case you do not need any more a long lived grid user certificate or you already obtained a new one, you can simply ignore the warning e-mail.
- If you still need a long lived grid user certificate, you must send (as explaied in the warning e-mail) a confirmation e-mail ** to the SWITCHpki RA pki@switch.ch. The SWITCHpki RA will then check your request and, provided your identity vetting is still valid, will send you a new invitation, after which the process will then proceed from Step 2 of the document How to request a SWITCHpki long lived Grid User Certificate; in case your identity vetting is not any more valid, you will be asked to start from Step 1 of the same document.
** Confirmation/request e-mail: please make sure to specify in the confirmation/request to the SWITCHpki RA whether your old certificate is to be revoked, so as not to be charged twice at billing time: in this case the old certificate will be revoked a week after the invitation is sent to you.
Notice that the invitation is only valid for a week, and you should therefore make sure to complete the invitation's steps within seven days from the date you received the invitation itself. As a reminder, by renewing your certificate you are creating a new key pair: make sure that you have still the old key, in case you encrypted your e-mails or personal information with it.