I have a cert expiring on 2/20/20 in the Virtual Host Certificate Management page. The team who create certs gave me the new ones, but I have no idea how to add or activate them. I have read the help pages within RSA but they make no sense to me, since I know nothing about certificates. Any information or help will be appreciated.
I looked around on RSA Link and found documents on how to Import a Signed Virtual Host Certificate and how to Activate a Virtual Host Certificate.
Are these of any help?
Regards,
Erica
Hello Erica.
Thanks for the quick response. Within the page under Alias, I cannot click on any of the certs to activate. All the certs I have imported say Signer Certificate and I can't do anything with them.
Greg
If the answer from Jay Guillette below does not resolve your issue, please How to contact RSA Customer Support and open a case so that a TSE can assist you.
Regards,
Erica
If the CA cert team gave you a file with *.cer or *.p7b extension, that's PKCS#7 format and does not need a password. You would have generated the Cert Signing Request, CSR in the AM Operations Console ...,
...and the private key from the PKI key pair would only be in the AM Web Tier Key store. That's why there's no password on the *.cer or *.p7b file. You CA Cert team would have signed your CSR request file.
If the CA cert team gave you a file with *.pfx or*.p12 extension, that is PKCS#12 format, it needs a password because the CSR was generated somewhere else, with another tool, and therefore the private key is in the .pfx or.p12 file
If the CA cert team gave you a file with *.cer or *.p7b extension, that's PKCS#7 format and does not need a password. You would have generated the Cert Signing Request, CSR in the AM Operations Console ...,
...and the private key from the PKI key pair would only be in the AM Web Tier Key store. That's why there's no password on the *.cer or *.p7b file. You CA Cert team would have signed your CSR request file.
If the CA cert team gave you a file with *.pfx or*.p12 extension, that is PKCS#12 format, it needs a password because the CSR was generated somewhere else, with another tool, and therefore the private key is in the .pfx or.p12 file