Differences

This shows you the differences between two versions of the page.

--- cluster:226 [2025/10/02 17:29] – [CAs & Certs] hmeij07
+++ cluster:226 [2025/10/02 18:05] (current) – [CAs & Certs] hmeij07
@@ Line 186: / Line 186: @@
       * hpcm40eth0c1.wesleyan.edu, hpcm40eth0c2.wesleyan.edu,
       * hpcm40ipmic1.wesleyan.edu, hpcm40ipmic2.wesleyan.edu
-  * then...View CSR, copy the private key into notepad
+  * then...View CSR, copy the private key (bottom) into notepad
+  * then...View CSR, copy signing request (top), send to InCommon admin
+Your SSL certificate for hpcm40eth0vpi.wesleyan.edu is ready
-  * download inCommon
+  * Download "as Root/Intermediate(s) only, PEM encoded" in "Issuing CA certificates only:" section
-    * Issuing CA certificates only:
+   * first link in that section
-    * as Root/Intermediate(s) only, PEM encoded (first one in chain section)
+   * open hpcm40eth0vpi_wesleyan_edu_interm.cer in Notepad
-  * menu CAs > import CA
+  * System > CAs >  Add
-  * copy all info into public
+    * name is InCommon_2024, next pull down menu select "Import CA"
-  * menu Certs > import a cert
+    * copy all content of _interm.cer file info into "certificate"  box
-    * signing auth, point to the CSR
+    * "private key" box leave empty
-    * as Certificate only, PEM encoded (first one in certs format)
-    * copy in public
+  * Download " "as Certificate only, PEM encoded"
-  * don't click http -> https s0 you don't get locked out
+    *  First link "Available formats:"
-  * when cert expires on you, just access https
+    * open file hpcm40eth0vpi_wesleyan_edu_cert.cer in Notepad
+  * System > Certificates > Add
+    * name is hpcma_2024_cert, next pull down menu select "Import Certificate"
+    * click "CSR exist onthis system", select CSR in pull down menu
+    * in "certificate" box copy contents of hpcm40eth0vpi_wesleyan_edu_cert.cer
+    * [NO] in "private key" box copy contents of CSR private key (first tab in Notepad)
+    * private key box remains empty, Submit, View and private key is filled in
+  * System > General
+    * pull down the new cert
+    * don't click http -> https s0 you don't get locked out
+    * Save and in popup box click "Restart Web Service"
 ==== Update 13 ====