Installing Certificate in SX20

[Paul Johnston]

Hi, Is there a step by step guide for installing a certificate in the SX20 using Microsoft  Active Directory Certificate Services, the sx20 side looks simple enough, it's the Certifcate Services side I'm struggling with.

TC7.2.1.cb31c3d

[Patrick Sparkman]

I think the only option you have is to upload it to the codec yourself.  See the SX20 Admin Guide, pg 38-41.

[Chris Swinney]

Hi Paul,

Are you referring more to what type of Certificate Template you need to create in in AD CS in order that you can publish this type of certificate, and the steps required to take the Certificate request from the SX20 to get the final certificate from AD CS?

For different services you might use different certificates and those certificate might be designed to secure different types of traffic (i.e. Client Authentication OR Server Authentication), or you could use a single certificate to secure everything. If you need the latter (maybe SIP communications, or even client authentication web communication with TMS??) I think you will need a certificate designed to secure BOTH server AND client communications.

Whilst this document is actually designed for the VCS, it may provide you with some guidance WRT creating and publishing a certificate via AD CS. See the VCS Certificate Creation and Use, page 10 and Appendix 5 page 27.

Hope it helps.

Cheers

Chris

[Paul Johnston]

Thanks for the replies, eventually got it done as per below, not saying it's the right way but did the job!

Use link below to creat a csr and private Key
https://www.digicert.com/easy-csr/openssl.htm

generates command as per below to use in openssl to create a csr
example?
openssl req -new -newkey rsa:2048 -nodes -out name.csr -keyout name.key -subj "/C=GB/ST=Hertfordshire/L=Hemel Hempstead/O=Steria/OU=Networks/CN=name"

(I used the IP address for the name)

Install open ssl
run command above
2 files will be generated csr and key file

generate certificate  on certserver
- home page - request a certificate
- advanced certificate request
- submit a certificate request using  a base 64 etc
- enter contents of csr file in saved request
- set certificate template to web server
- submit
- select base 64 encoded
- download certificate

On VC configuration/security
- browse for certificate downloaded above
- browse for key file
- add certificate
- enable for https server
- reboot

Background Info:

http://www.websense.com/support/article/kbarticle/How-to-use-OpenSSL-and-Microsoft-Certification-Authority
https://www.digicert.com/util/