Posted by: paragon | November 1, 2006

INTERMEDIATE CERTIFICATE SSL Install on root for cPanel / WHM

If your installing a vald ssl certificate for your cPanel server – you must use WHM to do so.

If your installing one for a virtual host then you can install the Intermediate Cert. via the command line, which you may be required to do in order to enable the Intermediate Certificate to install… The symptom is that the SSL cert will report that the cert. was not issued by a trusted provider.

 The key to installing the root cert for the server will be via WHM under SSL/TLS , then Change Server Certificates

1) Copy and paste the CRT issued to you in the first box.

2) Copy and paste the “Issuing” or Intermediate Cert in the 3rd box

3) No need to enter a domain name… 

**** You may try to put the Issuing / Intermediate Cert in the 3rd box for your virtual domains or you can use the following info to help with optioning your httpd.conf file directives. Common paths for Apache WHM would be /etc/httpd/conf/httpd.conf

INSTALLATION INSTRUCTIONS – APACHE 1.3

Installing Your Web Server Certificate and the Intermediate Certificate:
– Copy your issued certificate, intermediate certificate and key files (generated when you created the – Certificate Signing Request (CSR)) into the directory that you will be using to hold your certificates.
– Open the Apache httpd.conf file and add the following directives:  

 SSLCertificateFile /path to certificate file/your issued certificate  
 SSLCertificateKeyFile /path to key file/your key file  
 SSLCertificateChainFile/path to intermediate certificate/sf_issuing.crt

– Save your httpd.conf file and restart Apache.

INSTALLATION INSTRUCTIONS – APACHE 2.X
Installing Your Web Server Certificate and the Intermediate Certificate:
– Copy your issued certificate, intermediate certificate and key file (generated when you created the Certificate Signing Request (CSR)) into the directory that you will be using to hold your certificates.
– Open the Apache ssl.conf file and add the following directives:

 SSLCertificateFile /path to certificate file/your issued certificate  
 SSLCertificateKeyFile /path to key file/your key file  
 SSLCertificateChainFile/path to intermediate certificate/sf_issuing.crt

– Save your ssl.conf file and restart Apache.

INSTALLATION INSTRUCTIONS – Microsoft IIS 5.x/6.x
NOTE: For Windows NT 4.0, you must have at least Service Pack 4.0 or higher or Microsoft Internet Explorer 5.0.
Installing Intermediate Certificate:
Once you have downloaded the intermediate certificate, please follow the instructions below to install it:
– Select “Run” from the start menu; then type “mmc” to start the Microsoft Management Console (MMC).
– In the Management Console, select “File,” then “Add/Remove Snap In.”
– In the Add/Remove Snap-In dialog, select “Add.”
– In the Add Standalone Snap-in dialog, choose “Certificates”; then click the “Add” button.
– Choose “Computer Account”; then click “Next” and “Finish.” – Close the Add Standalone Snap-in dialog and click “OK” on the Add/Remove Snap-in dialog to return to the main MMC window.
– If necessary, click the “+” icon to expand the “Certificates” folder so that the Intermediate Certification Authorities folder is visible.
– Right-click on “Intermediate Certification Authorities” and choose “All Tasks”; then click “Import.”
– Follow the wizard prompts to complete the installation procedure.

Installing Your Web Server Certificate
– Select the Internet Information Service console within the Administrative Tools menu.
– Select the Web site (host) for which the certificate was made.
– Right mouse-click and select “Properties.”
– Select the “Directory Security” tab.
– Select the “Server Certificate” option.
– The Welcome to the Web Server Certificate Wizard windows opens. Click “OK.”
– Select “Process the pending request and install the certificate.” Click “Next.”
– Enter the location for the certificate file at the Process a Pending Request window. The file extension may be .txt or .crt instead of .cer (search for files of type “all files”).
– When the correct certificate file is selected, click “Next.”
– Verify the Certificate Summary to make sure all information is accurate. Click “Next.”
– Select “Finish.”

INSTALLATION INSTRUCTIONS – cPanel/WebHost Manager
About the Certificate Bundle
As part ofhe installation process for your issued SSL certificate, you must install the certificate bundle, which consists of our Valicert root certificate and the intermediate certificate. You can download the certificate bundle from our repository at https://certificates.starfieldtech.com/Repository.go. The bundle is located in the Root Bundle section.

Installing Web Server Certificate and Certificate Bundle
– Open the WebHost Manager and click “Install an SSL Certificate” on the SSL/TLS menu.
You will see a screen with three boxes on it. Your issued certificate, RSA private key and certificate bundle must be pasted into boxes 1, 2, and 3, respectively.
– In the first box, paste in the contents of your issued SSL certificate. If the certificate file is on your server, you may use the Fetch button to copy it from the file.
– In the second box, paste in your private key which was generated when you created the CSR.
– In the third box, paste in the certificate bundle (ca_bundle.crt).
At the top of the page click “Do it.”

ABOUT THE INTERMEDIATE CERTIFICATE
Before you install your Web Server Certificate you must install our intermediate certificate — the sf_issuing.crt  — on your Web server. An intermediate certificate is a subordinate certificate issued by the trusted root specifically to issue end-entity server certificates. The result is a chain that begins at the trusted root CA, through the intermediate certificate, and ending with the Web Server SSL certificate issued to you. Such a certificate is called “chained root certificate.” The usage of an intermediate certificate thus provides an added level of security as the Certification Authority (CA) does not need to issue certificates directly from its CA root certificate.

Advertisements

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Categories

%d bloggers like this: