48.6 Enabling SSL with a Self-signed Certificate

You might want to use a self-signed certificate in your test environment, since this type of certificate is easier to obtain than a signed certificate from a valid authority.

48.6.1 Exporting the Certificate Authority

You can use iManager to export the Certificate Authority (CA) from your eDirectory server to generate your self-signed certificate.

  1. Log in to iManager with the eDirectory administrator’s username and password.

  2. Click Administration > Modify Object.

  3. In the Security container, browse to the CA object called TreeName CA.Security. For example, IDMTESTTREE CA.Security.

  4. Click OK.

  5. Click Certificates > Self-Signed Certificate.

  6. Select the self-signed certificate that you want to use.

  7. Click Export.

  8. Clear Export private key.

  9. Click Export format > DER.

  10. Click Next.

  11. Click Save the exported certificate.

  12. Click Save File.

    iManager saves the file as TreeName cert.der. For example, IDMTESTREE cert.der.

  13. Click Close.

  14. Move the saved cert.der file to a location where you want to store the exported certificate.

48.6.2 Generating the Self-signed Certificate

Before generating the self-signed certificate, ensure that you have a keystore and certificate request file.

  1. Create a keystore and a certificate request file.

    For more information, see Section 48.5, Creating a Keystore and Certificate Signing Request.

  2. Log in to iManager.

  3. Navigate to Certificate Server > Issue Certificate.

  4. Browse to the .csr file created in Step 6.

  5. Click Next twice.

  6. For the certificate type, click Unspecified.

  7. Click Next twice.

  8. Update the SSL settings in the Configuration utility. For more information, see Section 48.2, Updating the SSL Settings in the Configuration Utility.

  9. Restart the application server.