View source for DLO Edgeserver ssl certificate renewal

[[Main_Page|Home]] > [[Backup server]] > [[Veritas DLO]] > [[DLO Edgeserver ssl certificate renewal]]


== Steps to Renew SBPL DLO Edgeserver SSL Certificate ==

=== 1. Generate CSR ===
CSR was generated using the following URL:

* https://www.ssl.com/how-to/generate-a-certificate-signing-request-csr-in-iis-10/

CSR files sent with the customer and got SSL Certificates from vendor in P7B format.

=== 2. Export Certificates from P7B to CRT ===
Use the command below to extract all certificates from a .p7b file:

<pre>
openssl pkcs7 -print_certs -in spledgeserver_sanzyme_com.p7b -out edge.crt
</pre>

=== 3. Install Server Certificate and Export Private Key ===
Follow the steps in the below article to install the server certificate manually:

* https://techcommunity.microsoft.com/blog/iis-support-blog/installing-server-certificates-manually-in-iis/394271

=== 4. Export Private Key from PFX ===
Use the command below to export the private key:

<pre>
openssl pkcs12 -in splprivatekey.txt.pfx -nocerts -out spledge.key
</pre>

=== 5. Remove Password from Private Key File ===
Use the following command to remove the passphrase:

<pre>
openssl rsa -in spledge.key -out newspledge.key
</pre>

=== 6. Update Certificate in DLO Admin Console ===
Upload (push) the Edgeserver certificate in the DLO Admin Console.