How do I generate a new SSL certificate from my SonicWall firewall?

03/26/2020 1386 40735

DESCRIPTION:

RESOLUTION:

CAUTION: Will require a restart of the firewall.

 In order to request and import a certificate from a certificate authority that will work on your appliance you will need to create a certificate signing request from the appliance.

1. Log into the appliance and navigate to Manage | Appliance | Certificates and click New Signing Request.
   
   
2. Fill out the Certificate Signing Request with information on the fully qualified domain name (FQDN) you will be using for the SSL.
   

   TIP: wildcard for a domain would be *.yourdomain.com, wildcards cost more but authenticate all subdomains on the domain.

3. Download the CSR. You can edit this with a text editor. Notepad ++ is a good option because it keeps the format that works best for copying a CSR request over to a certificate authority.
4. Request a SSL from your certificate authority providing this CSR text where they request.
   

   NOTE:When downloading the signed certificate from the certificate authority (such as GoDaddy or Thawte) select the server platform Apache SSL.

5. Once you get the certificate back from the certificate authority upload the certificate to the pending request.
6. Restart the appliance to verify the certificate is installed and validated.
   

   TIP: If the certificate shows "Validated No" use the following article to import the certificate chain to validate the SSL: Importing Certificate Authority Chain.