FileAudit Plus. Steps for Enabling SSL: The following steps will help you in the installation of SSL certiﬁcate in FileAudit Plus

Size: px

Start display at page:

Download "FileAudit Plus. Steps for Enabling SSL: The following steps will help you in the installation of SSL certiﬁcate in FileAudit Plus"

Valentine Harrison
5 years ago
Views:

1 Steps for Enabling SSL: The following steps will help you in the installation of SSL certiﬁcate in

2 Steps for Enabling SSL: The following steps will help you in the installation of SSL certiﬁcate in : Step 1: Startup Process : Step 2: Certiﬁcate Request Process : 1: Start.(Start --> All Programs --> --> Start ). 2: Change the Port Settings from http to https.("admin" tab --> "Connection" (left pane) --> Check "Enable SSL Port [https]" --> Save). 3: Stop.(Start --> All Programs --> --> Stop ). 4: Create tomcat speciﬁc ".keystore" ﬁle and ".csr" ﬁle, which will be further referred as and <domainname>.csr respectively. 5: To create the certiﬁcate keystore ﬁle from <installation directory> \ jre \bin, Execute the following command in the command prompt : keytool -genkey -alias tomcat -keypass <your key password> -keyalg RSA -validity keystore What is the First and Last Name : The NetBIOS or FQDN name of the server in which is running. What is the name of your Organizational Unit : The OU name which you want can be speciﬁed. What is the name of your Organization : Provide the legal name of your organization What is the name of your City : Enter the city name as provided in your organization's registered address What is the name of your tate/province : Enter the tate/province as provided in your organization's registered address What is the name of your Country Code : Provide the 2-letter code of the country your organization is located in. Password : Enter a password of at least 6 characters Note: At the end of executing the above command, you will be prompted to enter keystore password. Try giving the same password as your key password. 6. To create a csr(certiﬁcate Signing Request) ﬁle from the <installation directory> \ jre \ bin, Execute the following command in the command prompt : keytool -certreq -alias tomcat -keyalg RSA -keystore -ﬁle <domainname>.csr Page: 1

Step 3: Certiﬁcate Issuance Process : Request for certiﬁcate from Microsoft Certiﬁcate Services (internal

Click on "advanced certiﬁcate request" Submit a certiﬁcate request by using a base-64-encoded CMC or PKCS

csr" ﬁle and paste it under "Saved Request", select "Web Server" as "Certiﬁcate Template" and click on

3 Step 3: Certiﬁcate Issuance Process : Request for certiﬁcate from Microsoft Certiﬁcate Services (internal CA): 1: Connect to Microsoft Certiﬁcate ervices and click on "Request a certiﬁcate" link. 2. Click on "advanced certiﬁcate request" Submit a certiﬁcate request by using a base-64-encoded CMC or PKCS #10 ﬁle, or submit a renewal request by using a base-64-encoded PKCS #7 ﬁle. 3. Copy the content of the ".csr" ﬁle and paste it under "Saved Request", select "Web Server" as "Certiﬁcate Template" and click on "Submit" button. Note: Open the ".csr" ﬁle using an editor, copy the content and paste it under "Saved Request". Page: 2

$\jre\bin" folder 5. Click on the "Home" link on the top right hand side corner and click on "Download a CA certiﬁcate, chain certiﬁcate or CRL" link to download the CA root certiﬁcate.$

4 4. The certiﬁcate will be issued and click on "Download certiﬁcate chain" link to download "PKCS #7 Certiﬁcates" types. Note: Copy and paste the certiﬁcate ﬁle under "<installation dir.\jre\bin" folder 5. Click on the "Home" link on the top right hand side corner and click on "Download a CA certiﬁcate, chain certiﬁcate or CRL" link to download the CA root certiﬁcate. Click on "Download CA certiﬁcate" link and save the root certiﬁcate. 6.Browse to "<installation dir.\jre\bin" location using command prompt to import the internal CA certiﬁcate into ".keystore" ﬁle. Execute the below query to import the certiﬁcate into ".keystore" ﬁle Keytool import trustcacerts alias tomcat ﬁle certnew.p7b keystore <keystore_name >.keystore 7. Add your internal CA's root certiﬁcate to the list of trusted CAs in the Java cacerts ﬁle. Execute the below provided query to add the root certiﬁcate into trusted CA list of Java ﬁle. keytool -import -alias <internal CA_name> -keystore..\lib\security\cacerts -ﬁle certnew.cer Note: Open the "certnew.cer" to get the internal CA name and provide the password as "changeit" when it is prompted. Page: 3

5 Step 4 :Associating the Certiﬁcate with : 1. Copy the ".keystore" ﬁle from "<installation dir.>\jre\bin" folder to "<installation dir.>\conf" folder. 2. Take a back up copy of "server.xml" ﬁle as "server.xml_bak" and edit the ﬁle. 3. Replace the value of "keystorefile" to "./conf/<keystore_name>.keystore" at the last Connector tag (End of the page). 4. Replace the password for "keystorepass" to "password as given while creating keystore" 5. Save the server.xml ﬁle and start. 6. Now try accessing the application. Request for certiﬁcate from External CA. Submit the CSR ﬁle to your Certifying Authority (CA) 1. Unzip the certiﬁcates returned by your CA and put them in <install_dir>/jre/bin folder 2. Open the command prompt and navigate to <install_dir>/jre/bin folder 3. Now, run the respective commands from the below list as applicable to your CA: For "GoDaddy" certiﬁcates i. keytool -import -alias root -keystore -trustcacerts -ﬁle gd_bundle.crt ii. keytool -import -alias cross -keystore -trustcacerts -ﬁle gd_cross.crt iii. keytool -import -alias intermed -keystore -trustcacerts -ﬁle gd_intermed.crt iv. keytool -import -alias tomcat -keystore -trustcacerts -ﬁle selfservice.crt For "Verisign" certiﬁcates i. keytool -import -alias intermediateca -keystore -trustcacerts -ﬁle < your intermediate certiﬁcate.cer> ii. keytool -import -alias tomcat -keystore -trustcacerts -ﬁle admanager.cer For "Comodo" certiﬁcates i. keytool -import -trustcacerts -alias root -ﬁle AddTrustExternalCARoot.crt -keystore ii. keytool -import -trustcacerts -alias addtrust -ﬁle UTNAddTrustServerCA.crt -keystore Page: 4

6 domainname>.keystore iii. keytool -import -trustcacerts -alias ComodoUTNServer -ﬁle ComodoUTNServerCA.crt - keystore iv. keytool -import -trustcacerts -alias essentialssl -ﬁle essentialsslca.crt -keystore For "Entrust" certiﬁcates i. keytool -import -alias Entrust_L1C -keystore <keystore-name.keystore> -trustcacerts -ﬁle entrust_root.cer ii. keytool -import -alias Entrust_2048_chain -keystore <keystore-name.keystore> - trustcacerts -ﬁle entrust_2048_ssl.cer iii. keytool -import -alias -keystore <keystore-name.keystore> -trustcacerts -ﬁle <domain-name.cer> For "Thawte" certiﬁcates Purchased directly from Thawte i. keytool -import -trustcacerts -alias tomcat -ﬁle <certiﬁcate-name.p7b> -keystore <keystore-name.keystore> Purchased through the "Thawte reseller" channel: i. keytool -import -trustcacerts -alias thawteca -ﬁle <SSL_PrimaryCA.cer> -keystore <keystore-name.keystore> ii. keytool -import -trustcacerts -alias thawtecasec -ﬁle <SSL_SecondaryCA.cer> - keystore <keystore-name.keystore> iii. keytool -import -trustcacerts -alias tomcat -ﬁle <certiﬁcate-name.cer> -keystore <keystore-name.keystore> Note: If you are receiving the certiﬁcates from a CA who is not in the list provided above, then contact your CA to get the commands required to add their certiﬁcates to the keystore. Bind the certiﬁcates with 1:This will conﬁgure the server to use the keystore with your SSL certiﬁcate. SSL port [https] option 2. Enter port number (default: 8443) you plan on using for SSL connection, click Save, and restart. 3. Now, copy the ﬁle from <install_dir>\jre\bin folder and paste it in <install_dir>\conf folder 4. Open 'server.xml' ﬁle located at <install_dir>\conf folder 5. eplace the value of keystorefile with './conf/' and keystorepass with the password that you used in Step 1 (last Connector tag at the End of page) 6. Save 'server.xml' ﬁle and close it 7. Restart again for the changes to take eﬀect. support@ﬁleauditplus.com

ADSelfService Plus: Guide to Install SSL Certificate. 1 P a g e

ADSelfService Plus: Guide to Install SSL Certificate 1 P a g e Contents Document Summary:... 3 ADSelfService Plus Overview:... 3 Why do you need SSL Certification?... 3 Steps for Enabling SSL:... 4 Step