Open with table of contents

Import SSL certificate

To prevent HTTPS warnings when accessing your IGS user interface you will need to obtain and import an SSL certificate.

To complete this task you will need to use an existing, valid certificate that your organization currently owns, or purchase a certificate from a trusted Certificate Authority. You need access to the IGS UI and the Clearswift Server Console to complete the task.

The certificate should comprise two files:

• {hostname}.key
• {hostname}.cert

where hostname is the hostname of your IGS.

How do I...

• Import an SSL certificate?

  If you have direct command-line access to your IGS, you can follow the steps as described below to complete this task. If you only have remote access, you should enable an SSH session first. Show me how

  To enable an SSH session:

  1. From the Home page, click System > Security > SSH Access.

     SSH configuration options are displayed.

  2. Click Edit.
  3. Select the Enable SSH access check box, and type the IP or hostname of the SSH client you want to use to connect to your IGS.
  4. Click Save.

  5. From the SSH client, connect to your IGS.

  Leaving SSH access enabled for extended periods might represent a security risk. You should consider disabling SSH when not using it.

  1. From the Clearswift Server Console, select Open Terminal Session..

     A terminal session window is displayed.

  2. From the command line type the following:

     keytool -importcert -file {hostname}.cert -keystore /srv/tomcat/igpadmin/conf/igp.keystore -alias '{alias}'

     where:

     • hostname is the hostname of your IGS.

     • alias is your chosen name to identify the certificate.

       When defining alias, do not use ‘igp’ as this is a reserved alias..

  3. Use a text editor to open /srv/tomcat/igpadmin/conf/server.xml.

  4. Add the following attribute to the <Connector> settings node (below the server attribute):

     KeyAlias="{alias}"

     where alias is your chosen name to identify the certificate.

  5. Restart the administration UI application by typing the following command:

     sudo igp-servicecontrol restart igpadmin

See also...

• Configure email alert template
• Configure Information Governance Server
• Import domain controller certificate

© 1995–2018 Clearswift Ltd.