Installing an SSL certificate on a C2Net Stronghold Server

Two types of certificates must be installed during this process. The first is the "Site" certificate, the certificate for your domain name, contained in the email from Secure Business Services.

The second is the Intermediate certificate. Intermediate certificates link your Site certificate to the original certificate authority and are necessary for identifying your certificate as authentic. SBS Instant uses two Intermediate certificates; SBS Secure and SBS Secure Plus use a single Intermediate certificate.

Part one: Download and save your certificates

1. Open the email we sent you, that contains the certificate for your domain name.

2. Copy the certificate, including the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines.

3. Paste the certificate into a blank document in a text editor. Use an editor that will not add characters, such as TextPad.

4. Save the document. We recommend that you name it YourDomainName.crt and save it in your Web server's default directory for SSL certificates.

   We recommend that you also back up your certificate on another computer or storage device.

5. Confirm which certificate you purchased, and determine which set of Intermediate certificate(s) to download.

   To confirm which certificate you purchased, review your order confirmation.

   • If you purchased SBS Instant, download set A below.

   • If you purchased SBS Secure or Secure Plus, download set B below.

   A -- SBS Instant

   • Instant Validation SBS Intermediate 2 CA
   • Instant Validation AddTrust Intermediate 1 CA

   -OR-

   B -- SBS Secure and Secure Plus

   • Full Validation Intermediate CA

6. Download the Root-Intermediate set for your domain name certificate. To download, right-click each certificate file name and select Save Target As.

   Save the Root and Intermediate certificates to the same directory where you saved the certificate for your domain name.

Part two: Install your certificates

1. If you already have a temporary certificate in your /ServerRoot/ssl/certs directory, move, rename or delete it.
2. Run the command "getca ServerName" where "ServerName" is the same name created during generation of the key or certificate request ("genkey ServerName" or "genreq ServerName").
3. Open your Site certificate with a text editor and copy the content (including the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines) to your clipboard.
4. Paste the contents into the terminal window where you ran "getca".
5. Enter Control-D or the appropriate EOF character for your terminal.
6. Open the file ssl/certs/ca_new.txt located in your ServerRoot directory.
7. Open your Intermediate certificate(s) in a text editor.
8. Copy the content of your Intermediate certificate(s) (including the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines), and paste into ca_new.txt. If you are installing SBS Instant, paste *Intermediate1CA.crt first, and *Intermediate2CA.crt second.
9. Change the SSLCACertificateFile directive in your httpd.conf file to point to the Intermediate file (ca_new):

   SSLCACertificateFile ssl/certs/ca_new.txt

10. Restart the Web server. Your certificate is installed and ready to go to work.