ClusterFunk

Zeus Knowledge hub has an article here but I thought I would elaborate a little for the benefit of the Windows Admin’s

This assumes that you have a Windows machine on which to do the conversion.

1) Install OpenSSL

Windows binary here http://www.slproweb.com/products/Win32OpenSSL.html

2) Export Private Key from .PFX

Once you have installed openSSL

Do the following:

Copy your .PFX file to local file system on the windows machine you have installed OpenSSL on -

If you follow default install navigate to c:\openssl\bin\ and enter

openssl.exe pkcs12 -in <drive\path\name.pfx> -nodes -out drive\path\name.pem>

e.g. openssl.exe pkcs12 -in C:\cert\govuk.pfx -nodes -out c:\cert\PKgovuk.pem

Type the password for the PFX file

You should see a .pem file for the private key in your folder.

3) Export Certificate

Now repeat the process but this time use following syntax to export the certificate

openssl.exe pkcs12 -in C:\cert\govuk.pfx -nokeys -out c:\cert\Certgovuk.pem

You should see this:

and a new file

4) Import into ZXTM

Open admin console and navigate to catalogue \ SSL \ Server Certs

Select Import Certificate

Give your cert a name and populate the location of your cert and private key .pem files. Click “Import Certificate”

You should now see following.

It is more than likely that you will require an intermediary Certificate to complete the key chain.

5) Intermediary Certificate

If the Cert requires an Intermediary to complete the certificate chain do the following:

Download the appropriate certificate from the issuing Certificate Authority. In this example the CA is global sign

Cert is Here:

http://www.globalsign.com/support/intermediate/domainssl_intermediate.php

VeriSign here: http://www.verisign.com/support/install2/intermediate.html

And Thawte requires login here: http://www.thawte.com/roots/index.html

Download the intermediate certificate, this is usually via copying the cert from the web page and saving in a text file. Call the file intermediate.pem

Open the Imported SSL Cert and (scroll down) select install intermediate.

Populate the box with the location of the cert and then click upload.

You should see something similar to below

6) Finished

Test by navigating to the site and verify the certificate via the browser. The Certificate should be valid and display the complete key chain.

- FIN –