IBM HTTP
Installing your Web Server Certificate
Your certificate will be sent to you by email. The email message includes the web server certificate that you purchased in the body of the email message.
Copy the certificate from the body of the email and paste it into a text editor (such as notepad) to create text files.
Note: Copy the entire contents of the certificate from including:
-----BEGIN CERTIFICATE-----And
-----END CERTIFICATE-----
- Open the IBM Key Management utility
- Cut-and-paste the GeoTrust Trusted Root certificate - presented below - into a text file (.txt) on your server.
- In the Key Management panel, go to the pull-down menu and select Signer Certificates.
- Since the Trusted Root is a text file, select Base64-ASCII encoded data type and change the
*.armtype to*.txtfile type. Hit the Browse button and select the Trusted Root certificate.txtfile - type the label as Equifax Secure Certificate Authority. This certificate should immediately show up in the list of Signer Certificates.
- In the Key Management panel, go to the pull-down menu and select Personal Certificates. Since your new web server certificate is now a text file, select Base64-ASCII encoded data type and change the
*.armtype to*.txtfile type. Hit the Receive button and select your web server certificate file. This certificate should immediately show up in the list of Personal Certificates. You can View/Edit to verify your certificate.
- Add the desired/required modules to complete your server configuration, including setting up SSL Port 443.
- Check your httpd.conf configuration to verify the path to the appropriate key file ("key.db").
- Stop, and then Start your IBM HTTP Server.
Test your certificate by using a browser to connect to your server. Use the https protocol directive (e.g. https://yourserver.com/) to indicate you wish to use secure HTTP.
Note: The padlock icon
on your browser will be displayed in the locked position if your certificates are installed correctly and the server is properly configured for SSL.









