Explanation about the GSB server certificate information page. The following topics are covered on this page:  [ Confirming Certificate Information ]  [ Creating Certificates ]  [ Importing Certificates ]  [ Backing Up Certificates ]  [ Restarting the GSB Server Process ]

[ Confirming Certificate Information ]

Information about the current certificate (external certificate) can be confirmed on the certificate information table. (See the image below) * After a certificate has been successfully imported, the details of the new certificate will appear on this table.

[ Creating Certificates ]

Certificates (external) can be created using the Create Certificate section of the page. (See the image below)

Enter the information of the external certificate that needs to be created into each input field. The input fields and input restrictions of each certificate information input field are explained below. * Click the COPY button to copy the certificate information that is displayed on the Certificate Information table into each input field.   Note: the Key Size of the current certificate will not be copied. Item Description Input Restrictions FQDN ( CN ) Specify a publicly (internet) accessible FQDN. Maximum of 64 characters. Must contain only half-width alphanumeric characters and symbols ( \ " / * & , . - ). Organizational Unit ( OU ) Specify a department name. Maximum of 64 characters. Must contain only half-width alphanumeric characters and symbols ( \ " / * & , . - ). Organization ( O ) Specify an organization name. Maximum of 64 characters. Must contain only half-width alphanumeric characters and symbols ( \ " / * & , . - ). Location ( L ) Specify a city or town. Maximum of 128 characters. Must contain only half-width alphanumeric characters and symbols ( \ " / * & , . - ). State ( ST ) Specify a state or province. Maximum of 128 characters. Must contain only half-width alphanumeric characters and symbols ( \ " / * & , . - ). Country ( C ) Specify a country code. Must contain exactly 2 upper-cased characters. Key Size Specify the key size of the certificate. Select from either 1024 or 2048 bit. 1024 bit 2048 bit Click the Create Certificate button to download the certificate files in zip format. The zip file contains the following certificate files.  * Please make sure to keep the downloaded certificate file and CSR file in a safe place.  * The certificate file and the CSR file inside the ZIP file are logically connected with each other.    Please do not try to use the files inside the ZIP with other certificate files or CSR files. Filename Description gsb_out.csr The CSR (Certificate Signature Request) file that is used for requesting digital identity certificate when applying for a signed certificate to a certificate authority. The certificate file (gsb_out.jks) and the CSR file (gsb_out.csr) inside the ZIP file are logically connected with each other because the CSR file is generated from the certificate file. gsb_out.jks The certificate file that is used by the server. The website security certificate warning will stop appearing after importing the signed certificate from a trusted certifying authority. The signed certificate can be imported using the Import Certificate section of the page. The contents of the signed certificate will be reflected in this file after it has been successfully imported. gsb_out.txt This text file contains certificate file and CSR file-related information. Certificate file and/or CSR file information such as CN, OU, etc can be checked from this file.

[ Importing Certificates ]

Server certificate files can be imported using the Import Certificate section of the page. The signed certificate file that was issued from the CSR file (gsb_out.csr) of the server can be imported in this section. The intermediate certificate can also be imported in this section with the signed certificate.  * Only JKS files (*.jks) can be used as server certificate.  * Only the signed certificate that was acquired via the CSR file that has a logical connection    with the server certificate file can be imported.  * Possible import combinations are as follows:    1. Signed certificate (SignOut Cert) and Server certificate (Certificate).    2. Signed certificate (SignOut Cert), Intermediate certificate (Middle Cert), and Server certificate (Certificate).    3. Server certificate (Certificate) only.

The message below will be displayed if the import operation was successful.

The message below will be displayed if the import operation failed. Click the ErrorLogExport button to export the error log of the failed import operation.  * The exported error log file will be used to determine the cause of the error.

[ Backing Up Certificates ]

The current server certificate file in use can be backed up using the Backup Certificate section of the page. Click the Backup Certificate button to download the "gsb_out.jks" file.  * Note: the filename ("gsb_out.jks") of the certificate from the Create Certificate section is the same    as of the certificate that can be downloaded in this section. Please create a separate folder for each    certificate file.

[ Restarting the GSB Server Process ]

Click the GSB Process Restart button to restart the GSB server process of the current server. The GSB Process Restart button can be found on the lower left part of the certificate information table, and on the message window after successfully importing a certificate. (See the images below)  * Warning: the operations and services of SECUREMATRIX will be interrupted while the GSB server process    is being restarted.

After clicking the GSB Process Restart button, a status window will appear.  * Note: Please refrain from closing the status window while the server process is restarting.          If the status window is closed before the restart operation finishes, it will be          difficult to confirm whether the server has successfully restarted or not.

The message below will be displayed after the GSB server process has successfully restarted. Click [ To Cert.SelectPage ] to return to the GSB server certificate management page.