Manage personal certificates in a certificate database

Manage personal certificates

From the local management interface, go to the SSL Certificates management page.

All personal certificate names are displayed on this tab. If the Issuer or Subject field contains characters in a language other than English, these characters might be displayed in the panel as encoded characters.

Import a personal certificate

Any PKCS 12 file to be imported must have the file extension .p12 for the import operation to be successful.

Optinal: Password for the file containing the personal certificate to import.

  • Commit changes .

    Receive a personal certificate

    A personal certificate can be received only if a corresponding certificate request exists.

    1. Click...

        Manage > Recieve > Browse > personal certificate

      • Select the Default check box if we want to set the personal certificate as default.

      • Click Receive.

      • Commit changes.

    View a personal certificate

    1. Select the personal certificate we want to view.

    2. Click Manage > View. The content of the personal certificate is displayed in the browser.

    3. Optional: Click Export. Then, confirm the save operation in the window that pops up. We must configure the software that blocks pop-up windows in the browser to allow pop-up windows for the appliance before files can be exported.

    Export a personal certificate

    1. Select the personal certificate to export.

    2. Click Manage > Export. You must configure the software that blocks pop-up windows in the browser to allow pop-up windows for the appliance before files can be exported.

    3. Confirm the save operation in the browser window that pops up.

    Extract a personal certificate

    The Extract option is used to export a single certificate and its private key (if one exists) from the current key database to a new pcks12 formatted key database.

    1. Select the personal certificate to extract.

    2. Click Manage > Extract.

    3. In the Extract Personal Certificate window, enter a password for the extracted certificate container and confirm the password.

    4. Click Extract. We might want to save the certificate with the .p12 file extension for later use. Any PKCS 12 file to be imported must have the file extension .p12 for the import operation to be successful.

    Delete a personal certificate

    1. Select the personal certificate to delete.

    2. Click Delete.

    3. In the window that pops up, click Yes.

    4. Commit changes.

    Create a personal certificate (self-signed)

    1. Click New.

    2. Enter Certificate Label, Certificate Distinguished Name, Key Size, and Expiration Time. The default value for Expiration Time is 365 days.

      The distinguished name must be in the following format:

        CN=cName, OU=orgUnit, O=org, L=city, S=state, C=countryCode

      S= and ST= might be used for specifying state. However, the certificate or the certificate request always uses ST= .

      Any error in the distinguished name results in Error box with CTGSK3024W Invalid value for parameter &quot;-dn&quot; (<entered dn-value>) on save

    3. Optionally, select an entry from the Signature Algorithm list. If this option is not specified, the default signature algorithm is used.

    4. Select the Default check box if we want to set this personal certificate as the default certificate.

    5. Click Save.

    6. Commit changes.

    Set a personal certificate as default

    1. Select the personal certificate to edit.

    2. Click Edit.

    3. Select the Set as the Default Certificate check box to set the personal certificate as the default certificate.

    4. Click Save.

    5. Commit changes.

    Parent topic: Manage SSL certificates