Entrust Certificate Services Support Knowledge Base
Audience: Administrator
Last Modified: 2006-11-23 12:33:01.0
TN 6971 - How do I setup an Entrust SSL certificate within Plesk 7.5 ?
Before You Begin
The following steps have been tested successully with Plesk 7.5 reloaded.
To perform these steps you must be logged in to Plesk with full administration rights.
The Below guide is intended for Plesk Administration on Red Hat or Fedora O/S running Apache.
Creating your CSR and Private Key for your domain
- Login to Plesk and Choose your domain
- Click Certificates under Services section
- Click Add New Certificate
- Fill out the CSR form for the following:
Certificate Name - Type your domain name
Bits - select 1024 or 2048
Country - Select your Country where your business is registered
State or province - Type in your state or province
Location (City) - Type in your city or locality
Organization Name (company) - Type in your legal business or organization name
Organization department - Optional
Domain Name - Type in your common name (ie: www.entrust.net )
E-mail - Type in your email address
- Click on the button "Request"
- On the next screen, under the "Certificate Name" heading
Click on your domain and scroll down. - Copy your the private key to notepad and guard this file for safe keeping.
DO NOT EMAIL TO ANYONE.
Example of Private Key:
-----BEGIN RSA PRIVATE KEY-----
9KbJjh42/uSBMW5DllGgREFjc+Bol/DZJii5zgINhKlSus3Ff
zNkfI03xNWAP0BLhysMYwyoV8BGHfD0b7MUfos8tHAIH
MndaYnaMXNP3lB2qMqNW0EInFVuIf19VEZB08MQ+V9kJ
AoGAO9sFz3lcic/5xhWjY7zk4CP3JFz7+0bWTiU3539TNw
w8iHXOf0I72qY21Of3mNhz2IhIB8P0ih07BnvapKEdAbs7
Iy8gmHtRJ+OyyfukXqfQxsEWF6ir90zr8wRORGaJ+T72G
9KbJjh42/uSBMW5DllGgREFjc+Bol/DZJii5zgINhKlSus3Ff
wHT1iw6NAkEA8xdYaHbDS1EYD5UBTrvcfFmVAZA2qZk
g+uHJHj4fYzFNjCRksA92BVa/GHn3cPuwQJAVzJIR1eH/u
6XtJ3J9PKJDYXzGvMLa6pVG2mGLqM0nDpLO6/wKVIz0+
3t6H0eE14Y4PzLiU4Pv+Z3Ki8hFgkTSbFLuKenXkwC+IKj
YCLSotHXhLSvATXpwQJBAMrXcO02WRJ9+bFokw3HZAI
8biqLXYJaZLJqsMQBd/YBlvIMhfOJHUJKJTYtystyt=
-----END RSA PRIVATE KEY-----
- Copy your CSR code and submit this to Entrust to enroll for an SSL certificate.
Example of CSR (certificate signing request)
-----BEGIN CERTIFICATE REQUEST-----
MIIB/TCCAWYCAQAwgbwxCzAJBgNVBAYTAk
BxMGS2FuYXRhMR8wHQYDVQQKExZKZWFuL
VQQLExRUcnVlIFdheSBTdXBwbGVtZW50czEj
dXBwbGVtZW50cy5jb20xKjAoBgkqhkiG9w0B
ZW1lbnRzLmNvbTCBnzANBgkqhkiG9w0BAQE
h3w9G+zFH6LPLRwCBze13c7bpQu5MyXugwD
iH9fVRGQdPDEPlfZCWQBiIF3KzPEDk0CAwEA
AG6Ag0+cAKg14E4o5xoR8J6GehNPSKh/+oY
atstq9G6RscH33ZqtxJtOq76R9D1jUnGSR8dSf
Y0ZYVavStvJBySkqTJM8j82r8kA/J8pbJ=
-----END CERTIFICATE REQUEST-----
Server Certificate Installation
Please note: This puts the keypair into the Administrator's Repository and the Domain's Repository (for extra protection of key loss)
Part 1
- Login to Plesk and Choose your domain
- Click Certificates under Services section
- Under Certificates heading, click on the certificate listed
- Under "Upload certificate as text", Paste your SSL Certificate code into the form, that you received from Entrust
- Click on Send Text
When you add a certificate to repository, it is not installed automatically onto the domain or assigned to an IP address, but rather saved for the future uses. You can assign a certificate to an IP address from your IP pool management screen, or during hosting setup on an exclusively granted IP.
Part 2
- Login to Plesk and go to your main Server Administration section
- Click Add new Certificate
- Under Upload New Certificate Files, browse to your Private Key and Entrust SSL certificate
- Click Send File
- You may also Upload Certificate as Text and click on Send Text
Assigning your Entrust SSL Certificate
Please note: Before Proceeding, you must assign SSL certificates to IP addresses, your domain's IP should be exclusively allocated to you.
- Click on your Client,
- Click on IP Pool and Click on domain's IP address (Click Show All if you do not see any)
- Select the required SSL certificate name from the SSL certificate drop-down box.
- Click on the OK button at the bottom
To assign SSL certificate to domains:
- Click on Domains and Choose your domain
- Click the Physical hosting Setup icon
- Select the required SSL certificate from the SSL certificate drop-down box.
- Select the exclusive IP address for this domain.
- Click on OK button at the bottom
Stopping and Starting Apache
For the new certificate to take effect, please sto and start Apache
- From your Server Administration section, click on Service Management
- Stop the Web Server (Apache) service
- Start the Web Server (Apache) service
Disaster Recovery
- From your Server Administration section, click on Certificates
- Click on your Certificate Name
- Manually Copy and Paste the Private Key and SSL Certificate to plain notepad.
- Store in a safe and secure location
- Do this for each Certificate Name
Affected Products:
- Entrust Certificate Services 1 Year Advantage SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services 1 Year SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services 2 Year Advantage SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services 2 Year SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Cert Admin Advantage Server Certificate 1 Year Version Not Applicable Language Not Applicable Platform Not Applicable
- Entrust Certificate Services Cert Admin Advantage Server Certificate 2 Year Version Not Applicable Language Not Applicable Platform Not Applicable
![[Certification Authorities - Webtrust - Deloitte]](/images/cert_services/deloitte_seal_sm.jpg)