Adding an identity certificate for a Duplex server

Last Updated : Apr 15, 2021 |
Prolog information
Metadata
Keywords:
To add the signed identity certificate received from CA to identity certificate repositories, upload the pem format file or PKCS#12 format file to /var/home/ftp/pub directory first.
The signed Identity certificate can be a single certificate (self-signed root certificate) or include the certificate chain with the chain of trust that reverts to a trusted certificate. Communication Manager supports chained identity certificate.
You must have already installed the CA certificate that is provided by the CA and has been used to authenticate your certificate or the chained certificate, to CM trusted certificate repositories. This CA certificate must be trusted by all the Communication Manager services/interfaces that the identity certificate is applied for. If the CA certificate is not trusted by a Communication Manager service/interface, the installation of an identity certificate for this service fails, and Communication Manager prompts an error message.
Note:
Both the Communication Manager servers in Duplex system have their identity certificate, and the identity certificates must be installed on respective servers. You must install the identity certificates on both the Communication Manager servers.
However, the new certificates must be installed on the active server before doing an interchange.
  1. On the Communication Manager SMI interface, click Administration Server (Maintenance).
  2. In the Security section, click Server/Application Certificates.
  3. Click Add.
  4. Enter the file name of the certificate (that is loaded into) in the /var/home/ftp/pub folder.
    ADDITIONAL INFORMATION:
    The file must contain a certificate (that is loaded into) chain to add. The certificate must be a PKCS#12 file or a file in pem format.
  5. Enter the password of the certificate. This is necessary since the signed certificate file is encrypted with this password so that it is not transported in the clear as the administrator is importing the certificate.
  6. Click Open to validate the certificate.
    ADDITIONAL INFORMATION:
    After successful verification, the Server/Application Certificates - Add page shows the issued-to, issued-by, and date of expiration information for each of the added certificates in the chain. If the file does not contain a valid certificate, the system displays an error message instead of the certificate content.
  7. Select the appropriate repositories in which the certificate needs to be installed.
  8. Click Add.
    ADDITIONAL INFORMATION:
    Communication Manager does not needs to be restarted for the certificate to take effect.
Related links
Certificate Management