2: in condor_config set GRIDMAP = /path/to/gsi_keys/mapfiles/grid-mapfile 3: in condor_config set SEC_DEFAULT_AUTHENTICATION = REQUIRED 4: in condor_config set SEC_DEFAULT_AUTHENTICATION_METHODS = GSI +5: For HTCondor 7.9.x and later in condor_config set GSI_SKIP_HOST_CHECK=true and that should do it on the HTCondor daemon side of things. Optionally, edit =/path/to/gsi_keys/mapfiles/grid-mapfile= and replace =USERNAME_HERE= with your username. This is not necessary to get the daemons to start up, but needed for condor_submit.