Use this procedure to bundle the signed identity certificate and its corresponding private key into a PKCS#12 container using OpenSSL. PKCS#12 is the format required by System Manager to install the identity certificate on Session Manager.
Before you begin
Generate CSR and a private key through OpenSSL.
Ensure that you have a signed identity certificate file asm1_signed.pem and a private key asm1.key.
Ensure that the identity certificate is in the PEM format. If it is in a different format, use OpenSSL to change the format to PEM.
Copy the signed identity certificate file asm1_signed.pem from your system to the Session Manager and place it in the /home/cust/ directory.
Log in to the Session Manager CLI as cust.
Run the openssl pkcs12 -export -out asm1.p12 -inkey asm1.key -in asm1_signed.pem command to generate the PKCS#12 file.
STEP RESULT:
The system displays the following messages:$ openssl pkcs12 -export -out asm1.p12 -inkey asm1.key -in asm1_signed.pem Enter pass phrase for asm1.key: Enter Export Password: Verifying - Enter Export Password:
Type the private key pass phrase obtained during the generation of the private key asm1.key.
Type export password to protect the PKCS#12 file.
ADDITIONAL INFORMATION:
The password is used to install the identity certificate through System Manager.
STEP RESULT:
The system generates a PKCS#12 container file asm1.p12.
Download the file asm1.p12 to the system.
To avoid tampering, type rm /home/cust/asm1.key to delete the private key from the Session Manager server.
Next steps
Replacing an Identity Certificate by a third party CA issued certificate.
