Procedure
- On the Administration menu, click .
- On the Trusted Certificates Web page, click Add.
- On the Trusted Certificates - Add Web page, in the PEM file containing certificate field, enter the file name of a trusted certificate.
Note A trusted certificate must be a Certificate Authority (CA) certificate.
The certificate that you want to add must have a .pem or .crt extension and must be in the /var/home/ftp/pub directory on the server. If the file extension is .der, you must change the file extension to a .pem extension. You must change the extension using the -openssl x509 -inform der -in certificate.der -out certificate.pem command at the command-line.
- Click Open to validate the certificate.
After successful verification, the Trusted Certificates - Add Web page displays the issued-to, issued by, and date of expiration information for the certificate you want to add.
Note If the file does not include a valid certificate, the system displays an error message instead of the certificate content.
- Enter a file name to store the certificate by the same name in each repository.
The system displays several repositories to which you can add the certificate. The repositories include: C=CM related such as SIP PKI; W=Web server, M = Messaging.
If you add the Root certificate to a Messaging certificate, select W.
- Select the check box for the appropriate repositories in which you want to install the certificate.
- Click Add.
The system verifies the following:
The certificate name has a .pem or .crt extension. If the file name does include a crt extension, the system deletes the entered extension and replaces the extension with a crt extension prior to creating the file.
The certificate name is unique.
The certificate is not a duplicate certificate with a new name.
Note If you fail to install a certificate in one repository, the failure does not affect the installation in other repositories.
The system displays a success message and the Root certificate for the certificate authority in the Trusted Certificates Web screen.
Note After you install the Root certificate, if you need to install an Intermediate certificate, the website of the vendor directs you on the steps to obtain the Intermediate certificate.
After you install the certificates, install the Messaging certificate. For more information, see Adding a server and application certificate.