Using an existing certificate and key pair
About this task
If you have an intermediate certificate from a CA, then append the content to your server |
To install an existing certificate:
Steps
-
Import the key pair.
Example:
/opt/pingidentity/ase/bin/cli.sh import_key_pair private.key -u admin -p Warning: import_key_pair will overwrite any existing certificates Do you want to proceed [y/n]:y Exporting key to API Security Enforcer... OK, key pair added to keystore
-
Import the
.crt
file in ASE by running theimport_cert
CLI command.Example:
/opt/pingidentity/ase/bin/cli.sh import_cert server-crt.crt -u admin -p Warning: import_cert will overwrite any existing signed certificate Do you want to proceed [y/n]:y Exporting certificate to API Security Enforcer... OK, signed certificate added to keystore
-
Restart ASE.
For more information, see Starting and stopping ASE.