Solved

need to issue certificate for an internal application

Posted on 2011-03-25
5
391 Views
Last Modified: 2012-05-11
We are using an SSO product. It supports "self service" password reset from the SSO level layer.

For trusted access it is asking for a valid security certicate for the vault, the installed cert must have the follow characteristics:

The certificate must be issued by a Certification Authority (CA) that is trusted by end users.
The certificate must be in PEM format, a text-based Base64 encoding of the binary DER format.
The certificate file must include an unencrypted private key.
The certificate includes the VIP as the subjectAltName field in the Certificate Signing Request to the CA.
The vault needs to be restarted for the certificate to take effect in Password Reset Operations.


I don't know much about certs except for the ones I've purchased from our ISP for our exchange system to work and another system that uses https:...

this system in question is a totally internal system which cannot be seen from the outside. I have a DC with CA running on it... is that a start?

I have no idea how to have one issued, or how to "request" one.

I've included a screenshot of the Sentillion "install cert" page and of our CA on one of our DC's.

Thanks. server 2003 The current status of the CA windows on the one DC that has this service running
0
Comment
Question by:BryceRichert
  • 2
  • 2
5 Comments
 
LVL 20

Accepted Solution

by:
edster9999 earned 333 total points
ID: 35219237
You have two options.
1. You can buy a real cert from ay of the providers.  You will need to renew this each time it runs out (you can get them for 1 year or longer periods like 2 or 5 years)
This will work staight away on all machines.
If you want to go this route, google SSL CERT or talk to the ISP you already used.

2. You can issu a self sign cert.  This is where you make a cert yourself.  You will then need to install the cert above it (the signing company (which is you in this case)) on all pcs.
If you want to go this way Google "HOW TO SELF SIGN CERT".
Easiest way is to install OpenSSL and follow instructions posted a million times on the Internet.

0
 

Author Comment

by:BryceRichert
ID: 35219326
do I need a high assurity cert or can I just find the cheapest place?

I have lots of stuff at godaddy.. is this good enough?
0
 
LVL 20

Assisted Solution

by:edster9999
edster9999 earned 333 total points
ID: 35219371
cheapest one.  As long as the CA signer (the signing company) is recognised by all browsers.  Some of the cheaper ones are not.  
Go Daddy is fine.  It is cheap yet still recognised by all (important) browsers
0
 

Assisted Solution

by:busplanner
busplanner earned 167 total points
ID: 35219431
Here's another: http://www.rapidssl.com/  that has worked well for me
0
 

Author Closing Comment

by:BryceRichert
ID: 35252542
thanks.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Big data transfers via information superhighways require special attention and protection. Learn more about the IT-regulations of the country where your server is located. Analyze cloud providers and their encryption systems for safe data transit. S…
Most of the applications these days are on Cloud. Cloud is ubiquitous with many service providers in the market. Since it has many benefits such as cost reduction, software updates, remote access, disaster recovery and much more.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Delivering innovative fully-managed cloud services for mission-critical applications requires expertise in multiple areas plus vision and commitment. Meet a few of the people behind the quality services of Concerto.

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now