|
 Introduction
Configuring iPlanet Web Server
Introduction:
This document explains the CSR generation and server certificate installation procedures for working with iPlanet Web Server. The document focuses on setting up and installing the components which are necessary to secure your iPlanet web server.
There are some procedures which are required to activate the SSL protocol for the Web Server, this procedures can be categorize into the following sections:
- Creating a New Server Instance
- Creating a Certificate Trust Database
- Requesting a Certificate
- Installing Certificates
- Activating SSL
Before proceeding with procedures following information should be available:
- Requestor name:
- Telephone number:
- Common name:
- Email address:
- Organization:
- Organizational Unit:
- Locality:
- State or Province:
- Country:
Configuring iPlanet Web Server:
- Creating a New Server Instance:
There are two options here:
-
If it is required to enable SSL for all the pages on the web serve,r ignore this step.
-
If it is required to enable SSL on some of the pages, we have to create New Server Instance with the same Domain name and root Directory BUT the server port will be 443.
- Creating a Certificate Trust Database:
- Access the Administration Server and choose the Security tab.
- Type the password in Database Password.
- Re-type the password in Password (again).
- Click OK.
- Requesting a Certificate:
- Access the Administration Server and choose the Security tab.
- Click the Request Certificate link.
- Check new certificate
- Check CA Email and enter the email address for Comtrust Contact person.
-
Type the password for your key-pair file. This is the SAME password you specified when you created the trust database.
The CSR is submitted (including the BEGIN NEW CERTIFICATE REQUEST and END NEW CERTIFICATE REQUEST statements) to Comtrust while applying for the server certificate at http://www.comtrust.co.ae/PKIForms/serverenroll.htm. A reference number is provided for downloading the approved certificate.
The approved certificate can be downloaded at http://www.comtrust.co.ae/pkiforms/serverdownload.htm by putting in the reference number as provided at the time of applying for the certificate. A text file will be generated and displayed in the browser as under.
Note: The text file will include four certificates, save each certificate in separate text file with the following names:
- CTCA.txt : Comtrust Server Certificate Authority
- CTROOTCA.txt : Comtrust Root Certificate Authority
- GTEROOT.txt : GTE CyberTrust Root
- abc.txt : abc is the customer certificate which can be named anything.
- Installing Certificates:
- Access the Administration Server and choose the Security tab.
- Click the Install Certificate link.
- Check the type of certificate you are installing: (each certificate will installed separately)
- This Server is for : abc.txt
- Server Certificate Chain is for : CTROOTCA.txt and CTCA.txt
- Trusted Certificate Authority (CA) is for : GTEROOT.txt
- Type the password for your key-pair file.
- Check Message text (with headers): Be sure to include the headers "Begin Certificate" and "End Certificate" including the beginning and ending hypens. And make sure there is no empty lines in the end of the certificate
- Click OK.
- Click Add.
- Activating SSL:
- Access the Administration Server and choose the Preferences tab.
- Click the Encryption On/Off link.
- Make the desired changes and click OK.
 | 
