Personal certificates collection

Personal certificates collection

To manage personal certificates.
To view this admin console page, click Security > SSL certificate and key management. Under Configuration settings, click Manage endpoint security configurations > {Inbound | Outbound} > ssl_configuration. Under Related items, click Key stores and certificates > key store . Under Additional Properties, click Personal certificates.
The Personal certificates page lists all personal certificates in the selected key store. We can do most certificate management operations in this panel, including creating a new self-signed certificate, deleting a certificate, receiving one generated from a CA, replacing a certificate (simultaneous delete and create, replacing references across all key stores), extracting the signer, and importing or exporting a personal certificate.
Personal certificate requests are temporary place holders for certificates that will be signed by a certificate authority (CA).
The Key store collection must contain at least two key store files. Select one file in order to replace, extract, or export a key store,

Table 1. Personal certificates buttons

Button Resulting action
Create (drop-down list) Enables the appserver to create the following certificates:

Self-signed Certificate
CA-signed Certificate
Chained Certificate

Delete
Specifies to delete a certificate from the key store. Be careful that the certificate alias is not referenced elsewhere in the SSL configuration.
Receive a certificate from a certificate authority Enables the appserver to receive a certificate authority (CA)-generated certificate from a file to complete a certificate request.
Replace
Replaces a personal certificate with another personal certificate. All key stores in the configuration looking for signer certificate form the original personal certificate and replaces them with the new personal certificates signer. Any place in the security configuration where the certificate alias is referenced will be replaced with the new certificate alias.
Extract Extracts the signer part of personal certificate from the key store and stores it to a file. The file can then be used to add the signer to another key store.
Import Imports a certificate, including the private key, from a key store file or managed key store.
Export Exports a certificate, including the private key, to a specified key store file or manage key store.
Revoke Revokes a CA-signed certificate.
Renew Renews a self signed or chained certificate.

Alias

Alias by which the personal certificate is referenced in the key store.
When you select an alias, the View Certificate panel opens.

Issued by

Distinguished name of the entity by which the certificate was issued. This name is the same as the issued-to distinguished name when the personal certificate is self-signed.

Issued to

Distinguished name of the entity to which the certificate was issued.

Serial number

Certificate serial number that is generated by the issuer of the certificate.

Expiration

Specifies the expiration date of the signer certificate for validation purposes.

Related tasks

Create an SSL configuration

Related

Keystores and certificates collection

Button	Resulting action
Create (drop-down list)	Enables the appserver to create the following certificates: Self-signed Certificate CA-signed Certificate Chained Certificate
Delete	Specifies to delete a certificate from the key store. Be careful that the certificate alias is not referenced elsewhere in the SSL configuration.
Receive a certificate from a certificate authority	Enables the appserver to receive a certificate authority (CA)-generated certificate from a file to complete a certificate request.
Replace	Replaces a personal certificate with another personal certificate. All key stores in the configuration looking for signer certificate form the original personal certificate and replaces them with the new personal certificates signer. Any place in the security configuration where the certificate alias is referenced will be replaced with the new certificate alias.
Extract	Extracts the signer part of personal certificate from the key store and stores it to a file. The file can then be used to add the signer to another key store.
Import	Imports a certificate, including the private key, from a key store file or managed key store.
Export	Exports a certificate, including the private key, to a specified key store file or manage key store.
Revoke	Revokes a CA-signed certificate.
Renew	Renews a self signed or chained certificate.