User Management


 

Client-Provided SSL Certificate

Overview

If you prefer not to use a CivicPlus provided SSL certificate, you may opt to provide an SSL certificate of your choice. We currently accept all types of SSL certificates, including standard, wildcard, and UCC certificates. The following steps outline the process to obtain an SSL certificate from a certificate authority and provide this to CivicPlus in the necessary format.

When you provide an SSL certificate, deliverables for CivicPlus include:

  • PFX file
  • Password
  • Note: CivicPlus does not generate the CSR for client provided SSL certificates. This will allow you to control both the public and private key. 

Note: When you provide a certificate for implementation on other servers, CivicPlus will need the new PFX file every time the certificate must re-key. Similarly, CivicPlus will need the new PFX file for renewal of certificates. You must provide these prior to the expiration date to prevent any certificate errors on the website. 

Quick Links

Instructions

Note: The following instructions use the DigiCert Certificate Utility. The steps will appear differently on your specific server operating system, but the process is similar. 

  1. Click Create CSR to generate a CSR
    CreateCSR.png
  2. Enter the details for the CSR
    CSRDetails.png
    • Note: CSR Recommendations: Key size - minimum of 2048-RSA encryption
  3. Click Copy the CSR (this is the public key) and provide this to the certificate authority (CA)
    CopyCSR.png
  4. Paste the CSR in the certificate request with the CA
    PasteCSR.png
  5. Download the signed certificate to your computer
  6. Use the DigiCert utility; select Import to import the signed certificate
    ImportCertificate.png
  7. Click Browse to locate the file in your computer (file ends in .cer)
    Browse.png
  8. Enter the friendly name for the certificate or accept the default name
    • Note: The friendly name is not part of the certificate, but does identify the certificate. 
  9. Select Finish; the certificate will import and list under SSLs on the DigiCert Certificate Utility
    Finish.png
  10. Select the certificate; click Export Certificate
    ExportCertificate.png
  11. Select Yes, export the private key
    ExportPrivateKey.png
    • Note: Check the pfx file and Include all certificates in the certification path if possible
  12. Select Next
    Next.png
  13. Configure a complex password (8 characters or more) for the certificate
    ConfigurePassword.png
    • Note: Please remember this password, you will need it in order for CivicPlus to import the certificate. 
  14. Select Next
    Next__2_.png
  15. Click Finish
    Finish__2_.png
  16. Select OK to the confirmation pop-up
    OK.png
  17. Send the exported PFX file to the Dropbox folder created for you by CivicPlus
    • Note: The password will be read over the phone. 



I'd Like to Request an Enhancement

0 out of 0 found this helpful

Updated:
Follow

Article Feedback


Powered by Zendesk