Changing the SSL certificate

[EcoStruxureIT]

You can use the Change Server SSL Certificate wizard to create or add a new certificate. You also can create a certificate signing request to send to a certificate signing authority.

Create a new self-signed certificate

1. Go to System > Server Administration Settings > Server Access. On the Web Server tab, click Modify Certificate.

2. Select Create New Self-Signed Certificate.

3. Edit the certificate parameters as needed, and click Next.
   Note: Country is limited to two alphabetical characters.

4. Click Finish to overwrite the default SSL certificate with a new, self-signed SSL certificate created by the server. You can log on to the server again after it finishes rebooting.

Create a certificate signing request to send to a certificate signing authority

1. Go to System > Server Administration Settings > Server Access. On the Web Server tab, click Modify Certificate.

2. Select Create Certificate Signing Request (CSR) and click Next.

3. Edit the certificate parameters as needed, and click Next.
   Note: Country is limited to two alphabetical characters.

4. Copy the provided CSR text to a text file.
   You can manually select the text and use Ctrl+C, or right-click anywhere in the text to use the Select All and Copy options, to copy the CSR text.
   
   Note: Each time you generate a new Certificate Signing Request from the DCE user interface, the DCE server private key will change. You must add the signed certificate to DCE (which was created from your matching CSR) EITHER before you create a new CSR OR before you reboot the DCE server.
   If you do not follow these steps, the private key on DCE will not match the original private key that was on the server when you created the CSR. The server will fail to start because of a private key mismatch, and generate an error.

5. Submit the CSR to the appropriate 3rd-party certificate authority for signing. They will give you a signed SSL certificate.

6. Use the Add Certificate option in the "Choose Certificate Action" display to add the newly signed certificate to the server.

Import a 3rd-party signed SSL certificate

1. Go to System > Server Administration Settings > Server Access. On the Web Server tab, click Modify Certificate.

2. Select Add Certificate and click Next.

3. Use Ctrl+V to paste a copy of the certificate in the text box, or click Import Certificate to import the certificate from its text file, and click Next.

4. Click Finish to overwrite the current SSL certificate with the new SSL certificate. You can log on to the server again after it finishes rebooting.