IBM HTTP Server

Installing your Web Server Certificate

Your certificate will be sent to you by email. The email message includes the web server certificate that you purchased in the body of the email message.

Copy the certificate from the body of the email and paste it into a text editor (such as notepad) andsave it as a text (.txt) file on your server.

Note: Copy the entire contents of the certificate from (and including) the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines.

  1. Open the IBM Key Management utility
  2. Cut-and-paste the GeoTrust Trusted Root certificate - presented below - into a text file (.txt) on your server.
  3. In the Key Management panel, go to the pull-down menu and select Signer Certificates.
  4. Since the Trusted Root is a text file, select Base64-ASCII encoded data type and change the "*.arm" type to "*.txt" file type. Hit the Browse button and select the Trusted Root certificate .txt file - type the label as Equifax Secure Certificate Authority. This certificate should immediately show up in the list of Signer Certificates.
  5. In the Key Management panel, go to the pull-down menu and select Personal Certificates. Since your new web server certificate is now a text file, select Base64-ASCII encoded data type and change the "*.arm" type to "*.txt" file type. Hit the Receive button and select your web server certificate file. This certificate should immediately show up in the list of Personal Certificates. You can View/Edit to verify your certificate
  6. Add the desired/required modules to complete your server configuration, including setting up SSL Port 443
  7. Check your httpd.conf configuration to verify the path to the appropriate key file ("key.db")
  8. Stop, and then Start your IBM HTTP Server.

Test your certificate by connecting to your server.
Use the https protocol directive (e.g. https://your server/) to indicate you wish to use secure HTTP.

Note: The padlock icon on your Web browser will be displayed in the locked position if you have set up your site properly.

GeoTrust Trusted Root Certificate: "Equifax Secure Certificate Authority"

The root certificate can be downloaded from http://www.geotrust.com/resources/root_certificates/index.htm. Please contact support for advice on which root you will need.