5.4 HTTPS Server

This page includes information about each hosts’ certificate and connector details. The green lock icon signifies that the host is secure and the label signifies that the host is online. You can also do a bulk update all the hosts’ certificate simultaneously by selecting more than one host and using Import.

NOTE:You can import only the .pem (Privacy Enhanced Mail) files using the Upload PEM file button.

NOTE:By default, OpenSSL accepts DNS, email, URI, RID, IP, dirName as Subject Alternative Name (SAN). Privileged Access Manager uses OpenSSL to generate a Certificate Signing Request (CSR). When requesting a certificate in Privileged Access Manager, use the Alternative Names in the console as the "DNS" attribute.

IMPORTANT:In addition to the existing capability of using third-party signed certificates for HTTPS communication which supports external CA-signed certificates, Privileged Account Manager also supports wild card certificates from third-party. This allows you to manage certificates using the Privileged Access Manager console.

To generate the Certificate Signing Request:

  1. Navigate to Settings > Server Settings > HTTPS Server on the Administration Console.

  2. Click Generate Certificate Signing Request(CSR) icon against the preferred host.

  3. Specify the following details:

    Field

    Description

    Common Name

    The domain name for which you are purchasing an SSL certificate. It must be a Fully Qualified Domain Name.

    Region

    Select the country where you reside.

    State or Province Name

    Full name of the state from where your organization operates.

    Locality

    Name of the city from where the organization operates.

    Organization Name

    Name of Organization. If registered as an individual, enter the name of the person requesting the certificate.

    Organization Unit Name

    Business unit name within the organization.

    Email

    Specify the e-mail address.

    Subject Alternative Name

    Subject Alternative Name (SAN) is an extension to X.509 that allows various values to be associated with a security certificate using this field.

  4. Click Generate CSR.

    The Certificate Signing Request is displayed.

  5. Click Copy CSR icon to copy the request text or Export CSR icon to download the signing request.

  6. Share the certificate request with your certificate authority.

NOTE:When you receive the certificate from your certification authority, install it as described in .