Entrust Certificate Services Support Knowledge Base

Audience: General
Last Modified: 2009-10-27 09:41:52.0

TN 7913 - How do I install an SSL certificate for Juniper Secure Access VPN?

Question

How do I install an SSL certificate for Juniper Secure Access VPN?

Answer

NOTE: These instructions are based on release 6 of the Juniper Secure Access server (version 6.0R6).

To create a certificate signing request (CSR)

1. In the admin console, choose System > Configuration > Certificates > Device Certificates.
2. Click New CSR.
3. Enter the required information and click Create CSR.
4. Follow the instructions on-screen, which explain what information to send to the CA and how to send it.
5. When you receive the signed certificate from Entrust, import the certificate file using the instructions that follow.

To importing a signed certificate created from a CSR

1. From your certificate pickup page, copy the Web server certificate and save it to your Juniper device with a .cer or .crt extension.
2. In the admin console, choose System > Configuration > Certificates > Device Certificates.
3. Under Certificate Signing Requests, click the Pending CSR link that corresponds to the signed certificate.
4. Under Import signed certificate, browse to the certificate file and then click Import.

To import an intermediate/chain device certificate

1. From your certificate pickup page, copy the Cross Certificates and save it to your Juniper device with a .cer or .crt extension.
2. In the admin console, choose System > Configuration > Certificates > Device Certificates.
3. Click the Intermediate Device CAs link at the top of the page.
4. Click Import CA certificate.
5. Browse to the certificate that you want to upload and click Import Certificate.