Uploading and activating a customer-specific certificate

Instead of a self-signed certificate generated in the system (standard certificate or user-defined certificate), you can use a certificate of your own to access the system’s SE Manager.

Requirement

A certificate signing request was generated in the system for the certificate (see section "Requesting an SSL certificate") and sent to a certification authority.

Procedure

As soon as the certificate signed by the CA (certification authority) is available to you, you can upload and activate it.

Notes:

• When a certificate is activated on the target system, the web server is also automatically rebooted with the new certificate. A brief interruption of the SE Manager‘s connection to the system can occur.

• If the web browser used (on the administration PC or local console) knows that the new certificate is trusted or knows its root certificate, no further action is required.

• If the web browser does not know that a certificate is trusted, the certificate must be explicitly confirmed or imported (see the section "Confirming/importing a certificate in the web browser").

>	In the tree structure select Authorizations -> Certificates [-> <mu-name> (MU)].
>	In the Current SSL certificate group, click Create and enable new SSL certificate. The Create and enable SSL certificate dialog box opens.
>	Make the necessary entries: certificate and optionally key and CA certificate. Detailed information on the entries is provided in the SE Manager help.
>	Click Upload. The files specified are uploaded into the target system, activated immediately and displayed as the current SSL certificate.

Downloading a CA certificate and installing it in the browser

To prevent a certificate error, you can download the CA certificate currently installed on the Management Unit and install it in the browser.

>	Select Authorizations -> Certificates [-> <mu-name> (MU)], Certificates tab. The table displays the current certificate.
>	In the Issued by (CN) row click the Download CA certificate icon.

After the download, you can install the certificate in your browser.

>	Open the certificate file and click Install Certificate. The browser's certificate import wizard takes you through certificate installation step by step.