Overview
When setting up an x360Sync Private Cloud environment, you need to configure an SSL certificate for your Apache server. If you already have an existing IIS .pfx file, you must first convert it to a .key file using the OpenSSL application, according to the instructions outlined below. After completing these steps, you can then continue the SSL certificate configuration process for your Apache server by referencing Configure a Single Domain SSL Certificate or a Wildcard Certificate
PART 1: Export an IIS certificate
Before you begin, you must export your IIS certificate into a .pfx file.
1. Run mmc.exe.
2. In the Console menu select Add/Remove Snap-in.
3. Click the Add button, select the certificates snap-in, and and then select Add.
4. Select Computer Account then click Next.
5. Select Local Computer and then click OK.
6. Click Close and then click OK.
7. Expand the menu for Certificates and click the Personal folder.
8. Right click on the certificate that you want to export and select All tasks > Export.
9. A wizard will launch. Make sure you check the box to include the private key and continue through with this wizard until you have a .pfx file.
PART 2: Use OpenSSL to extract the private key and certificate file
Next, run OpenSSL to extract the private key and the certificate file.
1. Open up a command prompt window.
2. Within the command line, navigate to the Apache24\bin directory:
C:\>cd C:\Apache24\bin\
3. Launch the openssl application:
C:\Apache24\bin\>openssl
4. Export the private key file from the pfx file:
OpenSSL> pkcs12 -in filename.pfx -nocerts -out key.pem
5. Export the certificate file from the pfx file:
OpenSSL> pkcs12 -in filename.pfx -clcerts -nokeys -out yourdomainname.crt
6. Remove the passphrase from the private key, so Apache won't prompt you for your passphase when it starts:
OpenSSL> rsa -in key.pem -out yourdomainname.key
7. Open yourdomainname.crt in notepad and remove all contents prior to -----BEGIN CERTIFICATE----- and then save the file.
You can now configure Apache with these files.
For more information, please reference Configure a single domain SSL certificate or a wildcard certificate
SUPPORT | 720-204-4500 | 800-352-0248
- Contact Axcient Support at https://partner.axcient.com/login or call 800-352-0248
- Free certification courses are available in the Axcient x360Portal under Training
- To learn more about Axcient products, sign up for a free one-on-one training
- Subscribe to the Axcient Status page for updates and scheduled maintenance
1532