PortSight Secure Access Documentation

Generate Service Certificate Using Your Own Certificate Service

 

This guide will help you generate certificate for the Secure Access Web Service:
 

  1. Request a certificate:

    On the Secure Access Web Service computer:

a)       Log on as an Administrator.

b)       Run the Certificate Service Web site by typing http://<your_cert_server>/certsrv URL in the Internet Explorer.

c)       Select the "Request a certificate" task and click Next.

d)       Select "Advanced request" and click Next.

e)       Select "Submit certificate request" to this CA using a form and click Next.

f)        Fill the Identifying Information form.

g)       As the "Intended purpose" choose "Server Authentication Certificate".

h)        In the "Key Options" section check the "Use local machine store" option.

i)         Click Submit.

j)         Now the request for new certificate has been sent to the Certification Service. According to our settings made in step 4 in the Set up your own certificate service chapter, it's necessary to issue the certificate.

  1.  Issue the certificate on the CA computer:

a)       Log on as an Administrator.

b)       Click Start -> Control Panel -> Administrative Tools -> Certification Authority.

c)       Expand the tree and choose "Pending Requests". Your pending request should be displayed in the right panel. Right click the request, click "All Tasks" and choose Issue.

d)       The certificate is now correctly issued and you can found it in the  Issued Certificates folder.

  1.  Install the certificate:

On the computer with ARWebService installed:

a)       Log on as an Administrator.

b)       Run the Certificate Service Web site by typing http://<your_cert_server>/certsrv URL in the Internet Explorer.

c)       Select Check on the pending certificate and click Next.

d)       Select the certificate you want to check and click Next.

e)       Click on the "Install this certificate" link.

f)        The certificate should be correctly installed now.

  1. Check that the certificate has been correctly installed on the computer with ARWebService installed:

a)       Log on as an Administrator.

b)       Click Start -> Run, type mmc, and then click OK.

c)       I n the File menu, click Add/Remove Snap-in, and then click Add.

d)       Under Snap-in, double-click Certificates.

e)       Click Computer account, and then click Next.

f)         Choose Local computer and click Finish.

g)       This snap-in allows you to manage local computer certificates.

h)       Click Close.

i)         Click OK.

j)         Expand the tree and check that the service certificate is stored in Personal\Certificates folder.