Firstly when your issuance email arrives you will have two certificates in the email - your server certificate and a chained certificate.
Copy the chained certificate into a text editor such as notepad and save as chain.txt .
Copy your web server certificate into a text editor such as notepad and save as yourdomain.txt .
Copy the root CA certificate found at the bottom of this page into a text editor and save as root.txt. . |
| 1. |
Open the IBM Key Management utility |
| 2. |
Select Key Database File from the main User Interface, select Open . |
| 3. |
In the Open dialog box , select your key database name. Click OK |
| 4. |
In the Password Prompt dialog box enter your password and click OK.
|
| 5. |
Cut-and-paste the root.txt into a text file (.txt) on your server . |
| 6. |
In the Key Management panel, go to the pull-down menu and select Signer Certificates |
| 7. |
Since the Trusted Root is a text file, select Base64-ASCII encoded data type and change the " *.arm " type to " *.txt " file type. Hit the Browse button and select the Trusted Root certificate .txt file - type the label as Chained SSL CA Certificate Authority. This certificate should immediately show up in the list of Signer Certificates |
| 8. |
Repeat step 7, but this time browse to and select the chain.txt instead |
| 9. |
In the Key Management panel, go to the pull-down menu and select Personal Certificates. Since your new web server certificate is now a text file, select Base64-ASCII encoded data type and change the " *.arm " type to " *.txt " file type. Hit the Receive button and select your web server certificate file. This certificate should immediately show up in the list of Personal Certificates . You can View/Edit to verify your certificate |
| 10. |
Add the desired/required modules to complete your server configuration, including setting up SSL Port 443 |
| 11. |
Check your httpd.conf configuration to verify the path to the appropriate key file (" key.db ") |
| 12. |
Stop, and then Start your IBM HTTP Server. |
Test your certificate by connecting to your server.
Use the https protocol directive (e.g. https://your server/) to indicate you wish to use secure HTTP.
Note: The padlock icon on your Web browser will be displayed in the locked position if you have set up your site properly.
|
| |
