SSL certificate installation - part 1
Problem: Need to create and add new wildcard SSL certificate to Unified Workspace server.
Prerequisite(s):
- Download and install KeyStore Explorer tool on workstation
Solution(s): Below instructions will walk you through process of creating a new keystore and importing certificate. If you are looking for renewal instructions, you may skip to "Create certificate request (CSR):"
Create keystore file in KeyStore Explorer:
- Click File -> New
- Select JKS for new keystore type
- Click Tools -> Generate Key Pair
- Select RSA and 2048
- Click the edit name button
- Enter CN as *.company.com (replacing company.com with your domain)
- Enter OU with your organization department
- Enter O with your organization name
- Enter L with your city
- Enter ST with your state
- Enter C with your country code
- Click OK when finished entering data
- Click OK to create the keypair
- Click OK with default Alias (ex: *.company.com)
- Enter password for key pair*
IMPORTANT - make sure to use a secure password
IMPORTANT - make sure to document password - Click File -> Save As
- Enter keystore password
IMPORTANT - make sure to use same password as key pair - Enter name of file as wildcard.jks
*This is the relayuser account's password. If you have the current password documented, use the documented password.
Create certificate request (CSR):
- Open keystore file (if not already opened)
- Right-click on highlighted entry (ex: *.company.com)
- Choose Generate CSR
- Choose save location
- Click OK button
- Send CSR to Certificate Authority (CA)
Import certificate:
- Download/convert certificate file from CA to P7B format
- Open wildcard.jks file in KeyStore Explorer
- Right-click on entry
- Choose Import CA Reply
- Choose the P7B file
- Accept prompts
- Click File -> Save
Continue to part 2.
Reference(s):
keywords:
cert, jks, java, keytool