Adding an identity certificate for Simplex server

Last Updated : Mar 05, 2018 |
Prolog information
Metadata
Keywords:
To add the signed Identity certificate received from CA to identity certificate repositories, upload the pem format file or PKCS#12 format file to /var/home/ftp/pub directory first.
The signed Identity certificate can be a single certificate (self-signed root certificate) or a also include the certificate chain with the chain of trust that reverts back to a trusted certificate. Communication Manager supports chained identity certificate.
You must have already installed the CA certificate that is provided by the CA and has been used to authenticate your certificate or the chained certificate, to CM trusted certificate repositories. This CA certificate must be trusted by all the Communication Manager services/interfaces that the identity certificate is applied for. If the CA certificate is not trusted by a Communication Manager service/interface, the installation of identity certificate for this service will fail, and Communication Manager prompts an error message.
  1. On the Communication Manager SMI interface, click Administration Server (Maintenance).
  2. In the Security section, click Server/Application Certificates.
  3. Click Add.
  4. Enter the file name of the certificate (that has been loaded into) in the /var/home/ftp/pub folder.
    ADDITIONAL INFORMATION:
    The file must contain a certificate (that has been loaded into) chain to add. The certificate must be either a PKCS#12 file or a file in pem format.
  5. Enter the password of the certificate. This is necessary, since the signed certificate file will be encrypted with this password so that it is not transported in the clear as the administrator is importing the certificate.
  6. Click Open to validate the certificate.
    ADDITIONAL INFORMATION:
    After successful verification, the Server/Application Certificates - Add page shows the issued-to, issued-by, and date of expiration information for each of the added certificates in the chain. If the file does not contain a valid certificate, the system displays an error message instead of the certificate content.
  7. Select the appropriate repositories in which the certificate needs to be installed.
  8. Click Add.
    ADDITIONAL INFORMATION:
    Communication Manager does not needs to be restarted for the certificate to take effect.
Related links
Certificate Management