NOTE: You must install both the bundle CA [2] certificate and your server certificate to provide secure access to your Web server.

Get bundle CA file

On start-up, Stronghold loads CA certificates from the file specified by the SSLCACertificateFile entry in its 'httpd.conf' file.

• To install the bundle CA certificate, reference it in the httpd.conf file.

Installing the site certificate

Go to the Server Management screen.
Click the green icon (Wrench for RaQ4, Pencil for XTR) next to the SSL enabled virtual site
Click SSL Settings on the left side.
Copy the entire contents of the site certificate that you received, including

-----BEGIN CERTIFICATE-----
and
-----END CERTIFICATE-----


Paste the new certificate information that you copied into the "Certificate" window.
Select Use manually entered certificate from the pull-down menu at the bottom.
Click Save Changes.

• The certificates you receive will be:
UTN-USERFirst-Hardware.crt
Digi-SignCADigi-SSLXp.crt or Digi-SignCADigi-SSLXs.crt
your_domain.crt
• These must be imported in the correct order:
UTN-USERFirst-Hardware.crt
Digi-SignCADigi-SSLXp.crt or Digi-SignCADigi-SSLXs.crt
your_domain.crt
• Use the keytool command to import the certificates as follows:
eytool -import -trustcacerts -alias root -file UTN-USERFirst-Hardware.crt -keystore domain.key

For Digi-SSL Xp™ Certificates

Step by Step Instructions

• Step one: Copy your certificate to file

You will receive an email from Digi-Sign with the certificate in the email (yourdomainname.cer). When viewed in a text editor, your certificate will look something like:

Step-by-Step Instructions

• Step one: Copy your certificate to file

You will receive an email from Digi-Sign with the certificate in the email (yourdomainname.cer or yourdomainname.crt). When viewed in a text editor, your certificate will look something like:



-----BEGIN CERTIFICATE-----
MIAGCSqGSIb3DQEHAqCAMIACAQExADALBgkqhkiG9w0BBwGggDCCAmowggHXAhAF
UbM77e50M63v1Z2A/5O5MA0GCSqGSIb3DQEOBAUAMF8xCzAJBgNVBAYTAlVTMSAw
(.......)
E+cFEpf0WForA+eRP6XraWw8rTN8102zGrcJgg4P6XVS4l39+l5aCEGGbauLP5W6

How to install your Digi-SSL™ certificate on the server