How to replace the RSA Authentication Manager self signed console certificate with a signed certificate from Microsoft Active Directory Certificate Authority

[#1]

Article Number

000034942

Applies To

Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.x

Issue

This article explains how an RSA administrator would replace the RSA Authentication Manager self signed console certificate with a signed certificate from Microsoft Active Directory Certificate Authority.

Resolution

1. From the Operations Console select Deployment Configuration > Console Certificate Management.
2. Click Generate CSR.

Image description

3. Under Certificate Basics, fill in the certificate information.
4. Click Generate File.

Image description

5. Download the CSR then open it with a text editor and copy the file content.

Image description​

6. On the Active Directory CA server, go to https://localhost/certsrv or https://<Active Directory_CA_FQDN>/certsrv:

Image description

7. Click the link to submit an advanced certificate request.

Image description

8. Click the option to submit a certificate request using a base-64-encoded CMC or PKCS #10 file, or submit a renewal request by using a base-64-encoded PKCS #7 file.

Image description

9. Under Saved Request paste the CSR file content into the box labeled Base-64-encoded certificate request (CMC or PKCS #10 or PKCS #7).
10. For Certificate Template make sure to select Web Server.
11. Click Submit.

Image description

12. Click Download Certificate Chain.

Image description

13. From the Operations Console select Deployment Configuration > Console Certificate Management.
14. Select PKCS#7 (.cer or .p7b) for the Type of Certificate to import. 
15. Choose Import Certificate.
16. Click Activate.

Image description

17. Review the certificate details to ensure this is the certificate you wish to activate.
18. Place a check in the Activate Certificate Confirmation box.
19. Click Activate Certificate.

Image description

20. After selecting Activate Certificate, the Authentication Manager services will be restarted automatically.