3.11.2 Flow of obtaining certificates for SSL communication for the smart device manager

From a Certificate Authority, obtain certificates (root certificate and server certificate) for SSL communication for the smart device manager.

The flow of obtaining certificates for SSL communication for the smart device manager is as follows:

1. Create a private key for the Web server (keygen command).

   Specify the file containing the created private key for the Web server in the SSLCertificateKeyFile directive.

2. Create a Certificate Signing Request (CSR) (certutil reqgen command).

3. Display the contents of a Certificate Signing Request (CSR) (certutil req command).

   If necessary, check the contents of the Certificate Signing Request (CSR).

4. Send the CSR to the CA.

5. Acquire a certificate from the CA.

   Tip

   You can use the certutil cert command to check the contents of the certificate you obtained.

   Tip

   In the certificate you obtained, save the part from -----BEGINCERTIFICATE----- to -----END CERTIFICATE---- in another file (httpsd.pem file defined in httpsd.conf provided as standard). Defining this file for the SSLCertificateFile directive enables use of SSL.

   Important note

   The obtained certificates must also be set up on the JP1/IT Desktop Management 2 management server.

Related Topics

• 3.12.2 Procedure for setting up server certificates for SSL communication on the smart device manager

• G.1 Creating a private key for the Web server (keygen command)

• G.2 Creating a Certificate Signing Request (CSR) (certutil reqgen command)

• G.3 Displaying the contents of a Certificate Signing Request (CSR) (certutil req command)

• G.4 Displaying certificate contents (certutil cert command)

• G.5 Converting the certificate format (certutil cert command)

To Page Top