Quick Links
Server Types
Installing your Certificate on Novell I-Chain
There are 2 possible views for installing your certificate, the alternative view is at the bottom of this page.
The first process is to create a combined file containing the intermediates and root certificates.
Open the intermediate certificate in Notepad. Use 'Edit-Select All' then 'Edit-Copy'
Open a new text file with Notepad and paste the contents of the UTNAddTrustServerCA.crt intermediate certificate
Next, paste the contents of the OptimumSSLCA.crt intermediate certificate.
Open the AddTrustExternalCARoot.crt root certificate in Notepad and Copy the entire contents.
Paste the contents of the AddTrustExternalCARoot.crt root certificate into the new text document AFTER the intermediate certificates.
Your final doc should look something like this:
-----BEGIN CERTIFICATE-----
MIIEyDCCBDGgAwIBAgIEAgACmzANBgkqhkiG9w0BAQUFADBFQGEwJV
UzEYMBYGA1UEChMPR1RFIENvcnBvcmF0aW9uMRwwGgYDVQUgQ3liZXJU
.....
zs1x+3QCB9xfFScIUwd21LkG6cJ3UB7KybDCRoGAAK1EqlzWINlVqvaDj
vA2AOurM+5pX7XilNj1W6tHndMo0w8+xUengDA==
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIB+jCCAWMCAgGjMA0GCSqGSIb3DQEBBAUAMEUxCzAJMRgwFgYD
VQQKEw9HVEUgQ29ycG9yYXRpb24xHDAaBgNVBAMTEydXN0IFJv
.....
IjeaY8JIILTbcuPI9tl8vrGvU9oUtCG41tWW4/5ODFlitppKqXH/9Apy
bW1EDp3zdHSo1TRJ6V6e6bR64eVaH4QwnNOfpSXY
-----END CERTIFICATE-----
Save the new combined certificate
Open ConsoleOne and open the ICS container for the iChain server.
Open the certificate.
Select the 'Certificates' tab and press the "Import" button.
Click 'Read from file' and browse to the combined certificate created previously. Press 'Next'.
Click 'Read from file' and browse to the new server certificate or paste it into the window supplied.
Click 'Finish' to install the certificate.
You may get an error stating that the subject in the certificate does not match the subject in the object (CSR). This will be due to additional OUs in the certificate. Accept the certificate anyway. If a validation is attempted on the certificate in ConsoleOne it will produce an error stating 'Unable to validate the certificate chain to a root certificate'.
On the iChain server click 'Apply'.
The certificate will be installed but will display an error stating '-1240 Certificate failed parsing - may need external certificate'.
Open the accelerator for the web site. The 'Certificate' drop down item in the Secure Exchange portion will now have the certificate available. Select the new certificate, click OK and then press 'Apply'.
When the Management display is refreshed the website will be secured with the new certificate.
