Use externally provided certificates for encryption

By default, the System Management Server is configured to generate its own certificates for distribution to any connecting computers. However, you may need to enable encryption using certificates provided by a system administrator, a corporate IT department, or a certified third-party vendor. If you are provided with a certificate file, it must to be a .pfx file.

To use externally provided certificates for encryption

1. From the Configurator, select System Management Server.

2. Select Advanced.

   The Advanced Configuration dialog appears.

3. In the Certificate Source list, select Provided by IT (import / select).

   

4. In the Certificate list, select the certificate that you want to use.

5. Optional: To use a certificate that is not included in the list:

   1. Select Import.

      The Import Certificate dialog appears.

   2. In the Certificate file box, browse to the location of the .pfx certificate file you want to import, and then select it.

   3. In the Certificate Store box, select the type of certificate to create:

      • Root Certificate – Local Computer Trusted Root Certification Authorities store

      • Intermediate Certificate – Local Computer Intermediate Certification Authorities store

      • Personal Certificate – Local Computer Personal store

      The certificate is stored in the Certificate Store associated with the selected type:

      • If you were provided with one certificate, select Personal. However, check with your certificate provider about where the certificate needs to reside.

      • If you were provided with three certificates (a Root, Intermediate, and Personal certificate), repeat this process three times to import each one and place them in the appropriate certificate store.

   4. In the Password box, enter the password for the selected Certificate Store.

   5. Select OK to save your settings and close the Import Certificate dialog.

      The certificate provider must renew the certificates they generate as required.

6. Select Details to view the information about the selected certificate.

7. Select OK to save your settings.

8. Select Configure to apply your changes.

   The Configuration Messages area displays the steps in the configuration process and the progress. Upon successful configuration, the certificate generates in the selected System Management Server and its name displays in the Certificate displayed in the Advanced Configuration dialog.

   If the configuration is unsuccessful, refer to the error messages in the System Management Console.

9. Select Close to exit the Configurator.