Installing an SSL certificate on IBM WebSphere Advanced Single Server Edition 4.0

Part one: Download and save your certificates

1. Open the email we sent you, that contains the certificate for your domain name.

2. Copy the certificate, including the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines.

3. Paste the certificate into a blank document in a text editor. Use an editor that will not add characters, such as TextPad.

4. Save the document. We recommend that you name it YourDomainName.crt and save it in your Web server's default directory for SSL certificates.

   We recommend that you also back up your certificate on another computer or storage device.

5. Confirm which certificate you purchased, and determine which set of Root and Intermediate certificates to download.

   To confirm which certificate you purchased, review your order confirmation.

   • If you purchased SBS Instant, download set A below.

   • If you purchased SBS Secure or Secure Plus, download set B below.

   A -- SBS Instant

   • Instant Validation UTN Global Root CA
   • Instant Validation AddTrust Intermediate 1 CA
   • Instant Validation SBS Intermediate 2 CA

   -OR-

   B -- SBS Secure and Secure Plus

   • Full Validation Root CA
   • Full Validation Intermediate CA

6. Download the Root-Intermediate set for your domain name certificate. To download, right-click each certificate file name and select Save Target As.

   Save the Root and Intermediate certificates to the same directory where you saved the certificate for your domain name.

Part two: Install the certificate chain

Before you can add your Site certificate into the keystore, you must first build the certificate chain. The certificate chain links your Site certificate back to the Certificate Authority, and allows visitors' browsers to identify your certificate as authentic.

1. Open the IBM Key Management console.

2. In the Signer Certificates box, select root and click Add.

   

3. Type in the requested information about the name and location of the Root certificate.
4. Click OK.
5. In the Signer Certificates box, select primserver and click Add.

6. If you purchased SBS Instant, type the information for *Intermediate1CA.crt.

   If you purchased SBS Secure or Secure Plus, type in the information for *Intermediate3.crt.

7. Click OK.
8. If you purchased SBS Instant, select server and click Add. Type the information for *Intermediate2CA.crt, and then click OK.

Part three: Install your Site certificate

1. In the IBM Key Management console, open the dropdown and select Personal Certificates.

   

2. Click Receive.
3. Type in the data, the Certificate file name (the certificate file you received) and its location.
4. Click OK.

Part four: Enable SSL

Once your keystore has been successfully configured with your certificate, you can enable SSL in WebSphere Application Server.

In IBM WebSphere, SSL can be configured for each component. For more information on how to enable/configure it for each of them, please go to the IBM Web site at http://www.ibm.com/support/us/.