Procedure
- On the Administration menu, click .
- On the Trusted Certificates Web page, click Add.
- On the Trusted Certificates - Add Web page, in the PEM file containing certificate field, enter the file name of a trusted certificate.
Note A trusted certificate must be a Certificate Authority (CA) certificate.
The certificate which you want to add must have either a .pem or .crt extension and must be in the /var/home/ftp/pub directory on the server. If the certificate file extension is .der, then you must convert the file extension to a .pem extension. You can perform this using the following command at the command-line: -openssl x509 -inform der -in certificate.der -out certificate.pem
- Click Open to validate the certificate.
After successful verification, the Trusted Certificates - Add Web page shows the issued-to, issued by, and date of expiration information for the certificate to be added.
Note If the file does not contain a valid certificate, the system displays an error message instead of the certificate content.
- Enter a file name to store the certificate by the same name in each repository.
You will see several repositories that you can add the certificate to. The repositories include: C=CM related such as SIP PKI; W=Web server, M = Messaging.
If you are adding the Root certificate for an Messaging certificate, select W.
- Select the check box for the appropriate repositories in which you want to install the certificate.
- Click Add.
The system verifies the following:
The certificate name has a .pem or .crt extension. If the file name does not end with a crt extension, the system deletes the entered extension and replaces the extension with a crt extension prior to creating the file.
The certificate name is unique and does not already exist.
The certificate is not a duplicate certificate with a new name.
Note If you fail to install a certificate in one repository, this failure does not affect the installation in other repositories.
The system will return with a success and the Root certificate for the certificate authority will display in the Trusted Certificates Web screen.
Note Once the Root certificate is installed, if you need to install an Intermediate certificate, the vendor’s Web site will direct the customer on how to obtain the Intermediate certificate.
Once these certificates are installed, you can install the Messaging certificate. For more information, see Adding a server and application certificate.