Question

The certificate on our SecureTransport (ST) installation is goinf to expire soon. We obtained a new .CER format certificate and tried to import it. Unfortunately, we got the following error: Unable to import the certificate. An incorrect password was supplied or the certificate format is incorrect. How can we import the new certificate?

Answer

You need to generate a CSR on the first Edge server and then use the Finish button to complete importing the certificate. On all other Edge servers, you need to first export the certificate from the primary Edge server and then import it on the other Edge servers.

Install the new certificate on the Primary Edge server

Generate the CSR

1. Log on to Edge server administrative interface.
2. Click on Setup on menu bar.
3. Click on the Generate button.
4. Select the "Certificate Signing Request (CSR)" radio button.
5. Fill in the Common Name (if its blank) with the DNS for the server.
6. Ensure the Company is entered appropriately.
7. Ensure the State is "OHIO".
8. Click Generate.
9. Download the CSR on the next page.
10. Close the dialog box.
11. Note in the administrative interface, there is now a "Pending Local Certificates (CSR)" entry.

Now get the updated certificate.

Install the updated certificate

1. Log on to Edge server administrative interface.
2. Click on Setup on menu bar.
3. Click on the Finish... button for the Pending Certificate.
4. Fill in an alias name - maybe ftpd_09 (assuming the certificate expires in 09).
   The idea of creating a new alias is so we can go back to the old key if we need.
5. Browse to the location of the new certificate.
6. Click the Finish button.
7. Verify the key imported successfully.

Set STE to use the new key (for STE 4.6)

1. Log on to Edge server administrative interface.
2. Under the FTP/.HTTP Key Alias heading, change the Key Alias dropdown to the new key installed.
3. Click Apply.
4. Click on the 'AS2 SSH TM DB Proxy' link.
5. Under the SSH Server heading, change the dropdown for the SSH Key Alias to the new key.
6. Click Update (bottom of the screen).

To apply the changed key (for STE 4.6)

1. Log on to Edge server administrative interface.
2. In the FTP Server heading bar, click the STOP button.
3. Wait a minute or two.
4. In the FTP Server heading bar, click the START button.
5. In the HTTP Server heading bar, click the STOP button.
6. Wait a minute or two.
7. In the HTTP Server heading bar, click the START button.
8. Click on the 'AS2 SSH TM DB Proxy' link.
9. In the SSH Server heading bar, click the STOP button.
10. Wait a minute or two.
11. In the SSH Server heading bar, click the START button.
12. Log out of the administrative interface.

TEST

1. In your browser, connect to the Edge server's customer interface.
2. When prompted with the certificate, View Details.
3. Ensure the correct details are presented.

Install the updated certificate on the Secondary Edge servers

Export the updated key from Primary Edge server

1. Log on to the Primary Edge server administrative interface.
2. Click on Setup on menu bar.
3. Click on the link for the new key.
4. Click on the Export button.
5. Select the "Export private key" checkbox.
6. Enter the password.
7. Confirm the password.
8. Click Export.
9. Save the file to your local hard drive.
10. Click Close button.
11. Log out of the administrative interface.

Import the key on each Secondary server

1. Log on to Edge server administrative interface.
2. Click on Setup on menu bar.
3. Click on Import button.
4. Fill in an alias name - maybe ftpd09 (assuming the certificate expires in 09).
   The idea of creating a new alias is so we can go back to the old key if we need.
5. Fill in the other fields and click Import.
6. Verify the key imported successfully.

Set STE to use the new certificate (for STE 4.6)

1. Log on to Edge server administrative interface.
2. Click on Operations on the menu bar.
3. Under the FTP/HTTP Key Alias heading, change the Key Alias dropdown to the new key installed.
4. Click Apply.
5. Click on the 'AS2 SSH TM DB Proxy' link.
6. Under the SSH Server heading, change the dropdown for the SSH Key Alias to the new key.
7. Click Update (bottom of the screen).

To apply the changed key (for STE 4.6)

1. Log on to Edge server administrative interface.
2. In the FTP Server heading bar, click the STOP button.
3. Wait a minute or two.
4. In the FTP Server heading bar, click the START button.
5. In the HTTP Server heading bar, click the STOP button.
6. Wait a minute or two.
7. In the HTTP Server heading bar, click the START button.
8. Click on the 'AS2 SSH TM DB Proxy' link.
9. In the SSH Server heading bar, click the STOP button.
10. Wait a minute or two.
11. In the SSH Server heading bar, click the START button.
12. Log out of the administrative interface.

TEST

1. In your browser, connect to the Edge server's customer interface.
2. When prompted with the certificate, click View Details.
3. Ensure the correct details are presented.