Installing your SSL: IBM HTTP

To install your SSL certificate, you will need to do the following:

Part 1: Install the Root CA

1

Download the appropriate Root CA from below and save as globalsign_root.txt:

DomainSSL & OrganisationSSL:

http://www.globalsign.com/support/root-globalsign.html

ExtendedSSL:

http://www.globalsign.com/support/root-globalsign-rc2.html

2

Start the key management utility (IKEYMAN).

3

Open the key database file that was used to create the certificate request.

4

Enter the password, and then click OK.

5

Select Signer Certificates and then click Add.

6

Click Data type, and select a data type, such as Base64-encoded ASCII data. This data type must match the data type of the importing certificate.

7

Browse and select globalsign_root.txt.

8

Click OK.

9

Enter a label for the importing certificate.

10

Click OK.

The Signer Certificates field displays the label of the signer certificate you added.

Part 2: Install the Intermediate(s)

1

Download the appropriate Root Validation CA (Intermediate) from below and save as globalsign_intermediate.txt:

DomainSSL:

http://www.globalsign.com/support/root-domainssl.html

OrganisationSSL:

http://www.globalsign.com/support/root-organizationssl.html

ExtendedSSL:

http://www.globalsign.com/support/root-extendedssl.html

Please note: For Extended SSL copy both the intermediate and cross certificate into the same file.

2

Start the key management utility (IKEYMAN).

3

Open the key database file that was used to create the certificate request.

4

Enter the password, and then click OK.

5

Select Signer Certificates and then click Add.

6

Click Data type, and select a data type, such as Base64-encoded ASCII data. This data type must match the data type of the importing certificate.

7

Browse and select globalsign_intermediate.txt.

8

Click OK.

9

Enter a label for the importing certificate.

10

Click OK.

The Signer Certificates field displays the label of the signer certificate you added.

Part 3: Install the SSL Certificate

1

Copy your SSL Certificate into a text editor and save as yourdomain.cert.

2

Open the IBM Key Management utility (IKEYMAN).

3

In the centre of the IKEYMAN display you will see a section called Key Database content.

4

Click on the down arrow to the right to display a list of three choices.

5

Select Personal Certificates.

6

From the Personal Certificates section, click the Receive button.

7

Leave Data Type set to default (Base64-encoded ASCII data).

8

Browse and select yourdomain.cert.

9

Click OK on this dialog box.

10

Finally, restart your server.

Answer options

Your feedback was successfully added.

Answer tracking

Track

Watch the content of this article for changes.