Entrust Certificate Services Support Knowledge Base

Audience: General
Last Modified: 2008-09-25 13:03:31.0

TN 7577 - Installation of SSL Certificate into C2NET Stronghold

Question

How do I install my SSL Certificate into C2NET Stronghold?

Answer

1. Install your Entrust SSL Certificate; and
2. Enable SSL in your Web server as described in your server's documentation.

That completes the certificate installation process. Users are now able to connect to your Entrust-secured Web site.

If you are having difficulty finding what you are looking for, please email us.

1. Ensure that you have saved your Entrust SSL Certificate as a text file. See How to save your certificates in a file for instructions.

2. Install the new certificate using getca as shown below. This utility is normally installed in <server_root>/bin.

   getca myhostname < /tmp/entrustsitecert.txt

   Where: myhostname is the common name of the Web server for which the certificate was requested (for instance, "lion" if you requested a certificate for lion.entrust.com), and /tmp/entrustsitecert.txt is the name of the file you created in Step 1 of this procedure. This will save the certificate in the file <server_root>/ssl/certs/myhostname.cert.

3. Delete the Entrust SSL Certificate file you created in Step 1 of this procedure (for example, rm /tmp/entrustsitecert.txt).
4. Restart your server using <server_root>/bin/reload-server.

You have just installed your Entrust SSL Certificate.

1. Open a text editor. You will save your certificates using this text editor.
2. Open a Web browser and go to the URL that appears in the confirmation email you received from Entrust. Your certificates are displayed. The Entrust SSL Certificate is in the section named Entrust SSL Certificate. The certificates look like this example:

   -----BEGIN CERTIFICATE-----
   MIISDOIUlkmlsRRlkSlIWLISdsSKJlalOSISLKjwBgNV
   BAgAALOJdlwjam4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBU
   b3duMRQwEgYDVQQKEwHLOWDvcnR1bml0aTEYMBYGKi2U
   ECxMPT25saW5lIFNlcnZpY2VzMRowGAYDVQQDExF3d3c
   uZm9yd2FyZC5jby56YTBaMA0GCSqGSIb3DQEHHKJWAAk
   lmLKSuljSOIjsfBWu5WLHD/G4BJ+PobiC9d7SpDvAjuy
   C+dPAnL0d91tXdm2j190D1kgDoSp5ZyGSgwJh2V7diuu
   PlHDAgEDoAAwDQYJVVjkksohvcNAQEEBQADQQBf8LSLK
   knlsklSSLlworrr334ZmXD1AvUjuDPCWzFupRIlliq7U
   R8Z0wiJUUsllkfq/IuuIlz6oq6htdJklil/wdhh
   -----END CERTIFICATE-----
   

3. Copy the Entrust SSL Certificate to your clipboard. Remember to include the "----BEGIN CERTIFICATE---" and "----END CERTIFICATE----" lines.
4. Paste the certificate into the text editor and ensure that the entire text is flushed to the left with no leading or trailing whitespace. If there are any extra spaces the server will not recognize the format of the file and you will not be able to install the certificate.
5. Save the certificate as a file (for example, "/tmp/entrustsitecert.txt").

   Note	If you have received more than one certificate you will have to perform this and the previous step once for each certificate using unique filenames.

6. Close your text editor.
7. Make backup copies of the Entrust SSL Certificate and store it in a secure location.

Affected Products:

• Entrust Certificate Services Enhanced Service Account Version Not Applicable Language Not Applicable Platform Not Applicable