Purpose: SSL/TLS certificate installation guide
For Sun Java System Web Server

NOTE:
As of November 12, 2024, Entrust introduced a new TLS certificate hierarchy as part of the deployment. The TLS certificate delivery now includes two certificate chains. The delivery of these certificate chains can be in the form of:

• Individual files. Intermediate 1 (filename: intermediate1.crt ) and Intermediate 2 (filename: intermediate2.crt ) or
• Concatenate PEM file (filename: CertificateBundle1.pem/CertificateBundle2.pem ) or
• P7B format file (filename: Certificatebundle.p7b )

Both intermediate/chain certificates must be installed in your environment.


Skip to Installation.

Before you begin...

• Never share private key files.

• If you plan on using the same certificate on multiple servers always transfer the private key using a secure method ( e-mail is not considered a secure method of transfer ).

• Make sure you run the SSL Server Test at the end of the installation process to check your certificate configuration against SSL/TLS Best Practices.

• For more information on SSL/TLS Best Practices, click here .

Installing your Entrust SSL/TLS Certificate on Sun Java Webserver

1. Click the Download button in the pickup wizard to download your certificate files. Clicking the download button will produce a file named CertificateBundle.p7b .  This file includes your signed SSL/TLS certificate and the combined certificate chain.

2. In the Sun Java Webserver administration console, click on Server Certificates.

3. Click Install Server Certificate to start the wizard.

4. Select your configuration.

5. Enter the password your supplied when you created your Certificate Signing Request.

6. On Step 3 "Enter Certificate Data", select the radio button for the Certificate File option and browse to the CertificateBundle.p7b file that you downloaded in step 1. Click Next.




7. Enter a Nickname for the certificate to help you identify it in the future and select the listener.

8. Complete the wizard to finish installing the certificate.

9. To configure the certificate for use, go to Configuration > Edit HTTP Listener.

10. Under General , check the box to Enable SSL and select the certificate you just installed.

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance:

Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET
North America (toll free): 1-866-267-9297
Outside North America: 1-613-270-2680 (or see the list below)
NOTE: It is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.