Export Certificates

SSL Manager User Guide

Import a Public Certificate

On the right-hand side of the Public Certificates table, select Import to open the Import Certificate window. Selecting Import on the Settings Window Select one of the following options to import certificates. Once you enter this information, the certificate chain is added to the Certificates list. Web Server: To pull certificates from an external web server, enter a URL in the https://field, then select the Get Certificates button. File: The File radio button and then the File: field's Browse… button and choose a certificate to import. In the Import column (Import Certificate window – Web Server), select the checkbox next to the certificates you want to import, then select Import. The selected certificates are added to the Public Certificates table. Double-click any of the newly added rows to view details about or edit the alias. Viewing Details for a Key Parent topic: Manage Certificates

SSL Manager User Guide

Import a Public/Private Key Pair

This procedure is essentially the same as importing a public certificate, except that you can only import from a file. (See Import a Public Certificate) . On the right-hand side of the My Certificates area, select Import to open the Import Certificate window. Selecting the Browse Button the Import Certificate Window In the File field, select the Browse... button, and choose a certificate to import. In the Import column ( Import Certificate window - Web Server) , check the boxes of the certificates you want to import, then select the Import button to add the selected certificates to the My Certificates table. The certificate chain is added to the Certificates list. Double-click any of the newly added rows to view details about the alias and to edit the alias. Parent topic: Manage Certificates

SSL Manager User Guide

Create a New Public/Private Key Pair

On the SSL Manager tab, select the New button next to the My Certificates table to open the Generate New Keypair window. Opening the Generate New Keypair window Alias Area Enter the Certificate Alias for the new key pair. This field is required. Alias section with the Certificate Alias field Subject Area Enter the following information in the Subject area: Common Name: Enter the host name associated with the certificate. This is a required field. Organizational Unit: Organization: Country:, State:, Locality: Email:Subject area Validity Area Enter the valid dates for the new key pair: Valid From: Enter the date and time that the certificate becomes valid. Valid Until: Enter the date and time that the certificate validity ends. Validity area Key Generation Area Enter the key generation information: Algorithm: Select either RSA or DSA encryption. Key Size: Select either 2048 or 4096 from the pull-down menu. Signature Algorithm: Select a signature algorithm from the pull-down menu. Key Gen

SSL Manager User Guide

Delete or Save a Certificate

Delete a Certificate To delete a certificate, select the certificate in either the Public Certificate or My Certificate tables. Celect Delete. The certificate is removed from the table. Save Certificate Changes After editing items on the Settings - SSL Manager page, you'll need to save the certificates changes made on the page. To do this, select Save in the SSL Manager Tasks panel. If you try to leave the SSL Manager page before saving your changes, a window appears that asks if you would like to save the SSL Manager settings changes. Select Yes to save your changes and go to the selected page, No to forfeit the changes and go to the selected page, or Cancel to stay on the SSL Manager page with your changes intact though unsaved. Parent topic: Manage Certificates

SSL Manager User Guide

Manage Certificate Signing Requests (CSRs)

To generate a CSR for a self-signed key pair: Select a certificate from the My Certificates table. Select the table's Manager CSR button to open the Manage Certificate Signing Request window with the PEM-encoded version of the CSR. To export the CSR to a file if desired you will need to send the CSR to an external certificate authority (such as VeriSign or Entrust). The selected certification authority will return a CA (Certificate Authority) reply file, which you can add to the window by selecting the window's Import Reply button. Manage a Certificate Signing Request Parent topic: Manage Certificates

SSL Manager User Guide

Manage Certificates

You can manage certificates and key pairs on the Settings > SSL Manager page. The Global Settings section (top) allows you to configure certificate expiration warning settings. More information here: SSL Manager Global Settings The Public Certificates table (middle) displays certificates (public keys only) that you trust. These could be server certificates returned to a destination connector or client certificates returned to a source connector. The My Certificates table (bottom) displays certificates (public and private key pairs) that identify your server directly. These could be server certificates used by a source connector or client certificates used by a destination connector. SSL Manager tab with Global Settings, Public Certificates, and My Certificates sections Double-click any row in a certificate list to open the Certificate Information window, on which you can view details about the selected certificate. Certificate Information window with editable Certificate Alias field an

Export Certificates

Recommendations

Import a Public Certificate

Import a Public/Private Key Pair

Create a New Public/Private Key Pair

Delete or Save a Certificate

Manage Certificate Signing Requests (CSRs)

Manage Certificates

Import a Public Certificate

Import a Public/Private Key Pair

Create a New Public/Private Key Pair

Delete or Save a Certificate

Manage Certificate Signing Requests (CSRs)

Manage Certificates