Obtaining and importing a CA-signed certificate

You may provide your own Certificate Authority (CA) signed certificates, instead of the default "self-signed" certificate.

Before you begin

Procedure

1. Create a new certificate. Customize the server's private key to set the required validity period and correct location information.

   $ tls-certificate-create-custom --confirm

2. Generate a CSR (Certificate Signing Request) and send it to the chosen CA. If you already have a certificate with a private key, go to Step 4.

   $ tls-certificate-generate-csr

   NoteThe CA will check the sender's identity. This may take some time.

3. Depending on what you are provided, perform the appropriate steps:

   • If you are given a single X.509 signed certificate and multiple X.509 trust chains:
     1. Import each certificate of the trust chain provided.

        $ tls-certificate-import-trust-chain --confirm --path tc1.cer –alias tc1
        
        $ tls-certificate-import-trust-chain --confirm --path tcn.cer –-alias tcn

     2. Import the signed certificate.

        $ tls-certificate-import-signed --confirm --path signed.cer

   • If you are given a single PKCS #7 certificate bundle:

     Depending on the format of the trust chain and signed certificate, you may import them both at once.

     $ tls-certificate-import-signed --confirm --path signed_and_trust_chain

Results

Parent Topic

• Server and Cluster Administration Guide

  This guide provides information about administering servers, clusters, and server farms. Includes information about licensing, name spaces, upgrading firmware, monitoring servers and clusters, the backing up and restoring configurations.