A system certificate is used in three different instances:
httpd server
MSCI keystore
openvpn tunnels for ALEOS
From 2.17.5, admin users will be able to use Admin > System > Upload Certificate to upload three files that make up the system certificate:
private key file
server certificate
chain-of-trust
Initializing Table Of Contents...
Requirements
The files can be uploaded only if the following conditions are met.
The three uploaded files are in PEM format.
The private key is not password protected.
The server certificate and each certificate in the chain-of-trust is not expired.
The chain is complete. The issuer of each certificate in the chain can be traced all the way to the root certificate.
The chain-of-trust file uses the following format:
top one is intermediate n
intermediate n - 1
…
Limitations
The AMM only supports one system certificate and the certificate will be applied to all three functions.
httpd server
MSCI keystore
openvpn tunnels for ALEOS
Uploading a System Certificate
To upload a system certificate, go to Admin > System > Upload Certificate.
Select
to add the server certificate file.
Select
to add the private key file.
Select
to add the chain-of-trust file.
After the files are added successfully, select UPLOAD to upload the files to AMM.
If any of the files have an error, the system will display an error message. You can then remove the invalid file and upload the correct file again.
You can cancel the upload, by selecting CANCEL.
If the upload is successful, the status will be marked as Done.
To start a new upload, select RESET. The previous certificate will be rotated to a backup directory.
Viewing System Certificate Status
You can go to the Admin > System > Status to view the uploaded system certificate status. The System Status screen displays a brief description of the certificate usage and its status. Status can be either Installed or Not installed
Initializing Table Of Contents...
to add the server certificate file.
to add the private key file.
to add the chain-of-trust file.
UPLOAD to upload the files to AMM.
to add the server certificate file.
to add the private key file.
to add the chain-of-trust file.
UPLOAD to upload the files to AMM.
