If the identity certificates of the ADC or reverse proxy are signed by a third-party CA, download the identity certificates in a PKCS#12 format from the third-party CA.
If the CN and SAN are configured correctly in the certificates, you can use a single PKCS#12 file. Otherwise, two PKCS#12 files are required, one for the management applications and one for SIP/PPM.
Download the identity certificates from the third-party CA in a PKCS#12 format and copy it on the edge Branch Session Manager server.
If you use separate PKCS#12 files for the management applications and SIP/PPM, do the following at the command prompt of the edge Branch Session Manager server:
Run the following command to import the PKCS#12 file for the management applications:
ADDITIONAL INFORMATION:
certTool -i bsm-eth0.p12 -s eth0
Run the following command to import the PKCS#12 file for SIP/PPM:
ADDITIONAL INFORMATION:
certTool -i bsm-eth1.p12 -s eth1
If you use a single PKCS#12 file for the management applications and SIP/PPM, at the command prompt of the edge Branch Session Manager server, run the following command to import the PKCS#12 file:
ADDITIONAL INFORMATION:
certTool -i bsm.p12 -s all
Next steps
If the PKCS#12 file contains the root CA certificate, the root CA certificate is automatically installed in the trust store. Otherwise, manually install the root CA certificate in the trust store.
