KB Article #162367

How to setup SSL Communication for Admin Server and remove password

Problem

How do I setup in Validation Authority a SSL Communication For Admin Server Certificate and then Remove password so that it'll automatically start?

Resolution

1.) Login to VA Admin UI
2.) Go to Keys and Certificates->Create/Import Private Key->SSL Communication For Admin Server->Click on Submit Key Type
a.) Select Generate/Import Software Key (Or Hardware Key)->Click Submit Key Generation Technique
b.) Select Generate new private key (or import)->Click Submit Key Generation Or Import
c.) *Server Password: Enter in password you use to start VA Server (not the admin UI password). Then fill in information and click Submit
3.) Reboot the Operating System, and verify console prompts for password (May need to shutdown then start).
4.) Login to Operating System, look for VA Admin Passphrase prompt, enter VA Server password twice.
*NOTE: The password prompts twice due to Apache functionality, and not that of VA.
5.) Verify Tumbleweed/Axway Admin UI is started in the services panel (windows), then login to VA Admin UI to verify the Web Interface is started.
6.) From the services panel (windows) stop Tumbleweed VA Admin UI
7.) Open command prompt and go to c:\program files\tumbleweed\va\tools
a.) Backup adminserver.key from \va\entserv folder
CMD: ren ..\entserv\adminserver.key adminserver.key.original
b.) Create no password SSL key from original key
CMD: openssl rsa -in ..\entserv\adminserver.key.original -out ..\entserv\adminserver.key
i.) It will prompt you for the VA Server Password (Enter current one your using)
8.) Open the services panel (windows) start Tumbleweed/Axway VA Admin UI
9.) Login to VA Admin UI (if you can open VA Admin UI Website, it works.)
10.) Done!

*Note: We do not recommend removing the password requirements, and for HSM they are mandatory.