Installation of your certificate on Java System Webserver 6.x and 7.x

Sun Java Web Server 6.x

When you receive your certificate, it will be encrypted with your public key so that only you can decrypt it. The server will use the key-pair file password you specify to decrypt the certificate when you install it. You can either save the email somewhere accessible to the server, or copy the text of the email and be ready to paste the text into the Install Certificate form, as described here.

Installing a certificate

To install a certificate, perform the following steps:

1. Access either the Administration Server or the Server Manager and choose the Security tab.
   For the Server Manager you must first select the server instance from the drop-down list.
2. Click the Install Certificate link.
3. Check the type of certificate you are installing:
   This Server is for a single certificate associated only with your server.
   Server Certificate Chain is for a CA’s certificate to include in a certificate chain.
   Trusted Certificate Authority (CA) is for a certificate of a CA that you want to accept as a trusted CA for client authentication.
4. Select the Cryptographic Module from the drop-down list.
5. Enter the Key-Pair File Password.
6. Leave the a name for the certificate field blank if it will be the only one used for this server instance, unless:
   Multiple certificates will be used for virtual servers
   Enter a certificate name unique within the server instance
   Cryptographic modules other than internal are used
   Enter a certificate name unique across all server instances within a single cryptographic module
   If a name is entered, it will be displayed in the Manage Certificates list, and should be descriptive. For example, “United States Postal Service CA” is the name of a CA, and “Symantec Class 2 Primary CA” describes both a CA and the type of certificate. When no certificate name is entered, the default value is applied.
7. Select either:
   Message is in this file and enter the full pathname to the saved email
   Message text (with headers) and paste the email text
   If you copy and paste the text, be sure to include the headers “Begin Certificate” and “End Certificate”—including the beginning and ending hyphens.
8. Click OK.
9. Select either:
   Add Certificate if you are installing a new certificate.
   Replace Certificate if you are installing a certificate renewal.
10. For the Server Manager, click Apply, and then Restart for changes to take effect.
    The certificate is stored in the server’s certificate database. The filename will be <alias>-cert8.db. For example:
    https-serverid-hostname-cert8.db

Sun Java Web Server 7.x

After obtaining the certificate, you can install the certificate for a configuration using the Administration Console.

Installing a certificate

1. Click Server Certificates tab > Install button.
2. Select Configuration
   Select a configuration from the configuration list for which you need to install the certificate.
3. Select Tokens
   Select the token (Cryptographic Device), which contains the keys. If your key is stored in the local key database maintained by Sun Java System Web Server 7.0, choose internal. If your key is stored in a Smart Card or other external device or engine, choose the name of the external token from the drop down list box. Enter the password for the selected token.
4. Enter Certificate Data
   Paste the certificate text in the text area provided. When you copy and paste the text, be sure to include the headers “Begin Certificate” and “End Certificate” — including the beginning and ending hyphens. You can also click Browse button and select the .DER file manually.
5. Provide Certificate Details
   Provide a nickname to be used for the certificate. Select the HTTP Listener from the available list for handling the secure requests.
6. View Results
   This page provides you with the summary of selected options. Click on Finish to complete the installation process.