Install SSL Certificate iPlanet Enterprise Server 4

Toll Free: 800-892-7095

Install SSL Certificate: iPlanet Enterprise Server 4

Follow these instructions to install your SSL server certificate.

Overview. You will need to import two certificates. First the root certificate and then the SSL server certificate. Both of these certificates are included in the body of the fulfillment email from GeoCerts. Both certificates are also available from your GeoCerts account.

Import and Install the GeoTrust Root CA Certificate

First you will need to install the GeoTrust Root CA Certificate. Copy-and-paste the root certificate from the body of the fulfillment email into a simple text editor such as Notepad.
Start Netscape Suitespot Server Administration page.
Select the Security tab > Install Certificate.
Under Certificate For, choose the Trusted Certificate Authority (CA) radio button.
In the Certificate Name box enter Equifax Secure Certificate Authority.
Select Message Text (with headers) and paste in the entire contents of the GeoTrust root certificate from Step 1 into the box. Be sure to include ----- BEGIN CERTIFICATE ----- and ----- END CERTIFICATE -----. Click OK.
Click Add Server Certificate to install this certificate into the database.

Import and Install the SSL Server Certificate

Next install your SSL Server Certificate. Copy-and-paste the server certificate from the body of the fulfillment email into a simple text editor such as Notepad.
Start Netscape Suitespot Server Administration page.
Select the Security tab > Install Certificate.
Under Certificate For, choose the This Server radio button.
Select Message Text (with headers) and paste in the entire contents of the SSL certificate from Step 1 in this section into the box. Be sure to include ----- BEGIN CERTIFICATE ----- and ----- END CERTIFICATE -----. Click OK.
Click Add Server Certificate to install this certificate into the database.
Click OK on the popup windows.

Configuring the Server

Start Netscape Suitespot Server Administration page.
Click the button that indicates your server name.
Click View Server Settings on the menu list.
Check your Security settings. If it is off, click on Security.
The Encryption On/Off page is displayed. The Encryption should be On with a Port number of 443.
Click OK in the warning box.
Type the password you used when you generated the key pair earlier.
Save and apply the changes.
Click OK to return to the previous page.
Now add Server for Port 80.
Click on Servers.
Select Add Server.
Click OK to return to the previous page.
Click View Server Settings to verify the settings for port 80 and port 443.
Restart the iPlanet server.

Test Your SSL Certificate

Test your SSL certificate by using a browser to connect to your server. Use the https protocol directive. For example, if your SSL was issued to secure.mysite.com, enter https://secure.mysite.com into your browser.

Your browser's padlock icon Browser padlock will be displayed in the locked position if your certificate is installed correctly and the server is properly configured for SSL.

Additional Resources:

iPlanet 4.1 SSL Installation and Configuration Example.

CSR Legend

When generating your CSR you will be asked to input a few pieces of info. Below are some common fields with descriptions and examples.

Common Name (CN)

The fully-qualified-domain name for your certificate. Examples include...

www.domain.com
owa.domain.net
secure.domain.ca
*.domain.com (for wildcard SSL)

Organization (O)

The exact legal name of your organization. Do not abbreviate your organization's name. Example: Metro Realty LLC or Flowers by Jenny

Organizational Unit (OU)

The section or division of the organization. Example: Sales, Support, Customer Service

City or Locality (L)

The city where your organization is legally located. Cannot be abbreviated. Example: Atlanta

State (S) or Province

The state or province where your organization is legally located. Cannot be abbreviated.. Example: Georgia

Country (C)

The two-letter ISO Country Code abbreviation for your country. Example: US, CA, GB (must be two-letters)

Any email address. This field is arbitrary but must be filled in. GeoTrust will not use this email address to process your order. Example: user@example.com

Key Bit Length

The key bit length has to do with the initial key exchange, not the encryption strength of your certificate. GeoTrust recommends a key bit length of at least 1024.

Our Customers

(see more)