Question about Migrate Certificates

[rodrigo.hernandez]

     Dear Mister

I need to change a service SSL than live in a Farm Server, to do SSL Ternmination in the ACE. Is a migration.

But , I have some doubts about it:

- My customer have the certificates and keys living in a repositoy, called KEY.DB ( in SO AIX 5.3, withWeb IPlanet 6.1 SP5 ). How I take this certificates and integrate it to the ACE?.

- Is mandatory to have the certificates and keys in both ACE, when I am doing FT ACE.

Excuse me the simply question, but is my first experience.

Best Regards

[ciscocsoc]

Hi Rodrigo,

iPlanet is an Oracle product so looking at their documentation is the starting point for managing SSL certificates. I did find a Citrix support article on extracting certificates and keys at http://support.citrix.com/article/CTX109875 - once you have the certificates and keys in PKCS#12 format you can convert them into other formats using openssl.  Alternatively, someone in the organisation should have the certificates from when they were imported into the cert and key databases.

> - Is mandatory to have the certificates and keys in both ACE, when I am doing FT ACE.

Yes. If you don't have the certficates on both ACEs you will break FT between the two ACEs for that context and it will be in a state of STANDBY_COLD.

HTH

Cathy