If you already have your SSL Certificate and just need to install it, see SSL Certificate Installation below.


Before you begin, ensure that the following are installed to your ConsoleOne workstation:

  • ConsoleOne 1.3.6 or later
  • Certificate Server snapin Version 2 (2.23 Build 34 or higher)
  • Server NICI 2.6 or later.

1.  Run ConsoleOne

2. Inside the container of the server you are securing, create a new object. For the type of new object select 'NDSPKI:Key Material'.

3. You will be asked to select the server that the certificate will be applied to.

4. Select 'Custom' for the creation type, then click Next. When you are asked for the Certification Authority select 'External Certificate Authority'.

5. When asked for the RSA Key size, accept the default size of 2048 bits and allow the private key to be exported. Hit 'Next'.

6. Next, you will be allowed to edit the Certificate Parameters. You must change the 'subject name' to reflect your organization and domain name details.

Example of a 'subject name': ' CompanyInc.L=YourCity.S=YourState.C=us'

Be careful to follow the General CSR Creation Guidelines as you enter these details.

7. Select to use the SHA1 algorithm.

8. Click 'Next', then 'Finish'. This will generate your CSR.

9. Save the CSR in Base64 format to the system clipboard.

10. Paste the entire CSR (including the BEGIN and END tags) into the TRUSTZONE order form, then select 'Novell Web Server' as your server platform.

11. Remember the name that you choose for the certificate object. You will install the certificate file to the same object later.

12. After you receive your SSL Certificate from TRUSTZONE, you can install it.



Note: If you received a .p7b file in an email from TRUSTZONE, or are able to login to your account to download a certificate bundle (.p7b) file, go ahead and skip forward to step 6. Otherwise, steps 1-5 will walk you through the process of creating a .p7b file from standard format SSL certificate files.

1.  Download the SSL certificate, Intermediate, and Root certificate files from your TRUSTZONE account.

2. Import the root and intermediate certificates into Internet Explorer

On a Windows Computer, double-click each certificate file and click the 'Install Certificate…' button to start the Certificate import wizard. The TrustedRoot.crt certificate must go into your Trusted Root Certification Authorities store, and the Intermediate certificate (IntermediateCA.crt) must go into your Intermediate Certification Authorities store.

3. Double-click the SSL Certificate (your_domain_name.crt) for your domain. Go to the details tab, and click on Copy to File.


4. Choose 'Cryptographic Message Syntax Standard – PKCS #7 Certificates (.P7B)' and check the 'Include all certificates in the certification path if possible' box.


5. Give it a name, and Finish. This will create a single bundled certificate from the three individual certificates.

6. Go to ConsoleOne, and then to the certificate that created the CSR.

7. In the Public Key Certificate Tab, choose Import, select "No Trusted Root Certificate available". Click next, and then Import the Server Certificate you created.

**Note**: You may recive a warning that says 'The subject name requested when the key pair was generated does not match the subject name in the certificate being stored…' — If you receive this warning please hit the OK button to import the certificate anyway.

8. After you have validated the certificate, it is ready for use.

Note: If you click on the Validate button, you may receive a warning about reading the Certificate Revocation list. This appears to be a problem with ConsoleOne's validator and does not affect the installation of your certificate. You can verify that your certificate is installed correctly by using TRUSTZONE SSL Labs


Last updated: August 17, 2017