Importing a Certificate Signing Request (CSR) from a Commercial Certificate Authority (CA)

12/20/2019 177 People found this article helpful 42,575 Views

Download

Print

Share

• LinkedIn
• Twitter
• Facebook
• Email
• Copy URL The link has been copied to clipboard

Description

After you create your CSR and send it to a CA, you will receive an e-mail with a CSR Response. In order to import this CSR Response into the appliance there are three main things you need to do:

• Get the CA's root certificate
• Append the CA's root certificate to the CSR response
• Import the CSR response with the CA's root certificate into the appliance

Note: The certificate type needed is an Apache certificate. Apache/modSSL is not correct.  

In this example there is no intermediate certificate chain, so we only have to add the CA's root certificate to the CSR Response. 

Resolution

This is an example of a CSR response. It is also referred to as a "cert blob":

Copy and paste this cert blob into a text editor (for example, Notepad) and save it as yourcsr.cer.

Getting the CA's root certificate:

1. Double-click the yourcsr.cer file.
2. Click the Certification Path tab.
3. Click on the certificate above your certificate and then click the View Certificate button.
4. Click on the Details tab.
5. Click the Copy to File button.
6. Click Next.
7. Select Base-64 encoded X.509(.CER).
8. Click Next.
9. Save this file locally.

Now you have the CA's root certificate. We can then append it to the CSR Response received from the CA.

Appending the CA's root certificate to the CSR response:

1. Open the CA's root certificate you just saved in a text editor and copy it to the Clipboard.
2. Open the CSR response saved earlier (yourcsr.cer).
3. Paste the CA's root certificate at the very bottom. It should look something like the example below.
4. Save this CSR response as csrwithroot.cer and then import it to the Aventail appliance.

CA's root certificate and CSR response example:

Importing the CSR response with the CA's root certificate into the appliance:

1. Log in to AMC.
2. Click SSL Settings in the main AMC navigation menu.
3. Click Process CSR Response.)
4. Browse to the CSR Response just created (csrwithroot.cer).
5. Click Save.
6. Apply the Pending Changes.

Related Articles

• How to secure Virtual Office portal from all external access
• NetExtender users fail to get connected throwing an Error Failed to get vpn protocol on firmware 10.2.1.2 or above due to misconfigured protocol
• Is SRA/SMA appliance vulnerable to CVE-2016-2183 and CVE-2016-5915?

Categories

• Secure Mobile Access > SMA 1000 Series