Video Screencast Help
Symantec Appoints Michael A. Brown CEO. Learn more.

Brightmail Gateway 10.0.1-2 How to install GoDaddy Certificate?

Created: 28 Dec 2012 | 1 comment
CP's picture

I just upgraded to v10.0.1-2 and would like to install GoDaddy SAN Certificate so the user will not have to keep hitting ignore the warning or the DEMO certificate.

How do I do that?

The CER was created based on a windows 2008 R2 server but it has also the SAN name of the SBG server hence it's a SAN certificate.

I also noticed that GoDaddy isn't listed as one of the CA so I probably will need help importing it in there.

Could someone help me please?

 

Thanks.

 

Comments 1 CommentJump to latest comment

Art_P's picture

In order for a Symantec Messaging Gateway (SMG) certificate to be recognized by a browser its issuer must be trusted by the browser and the SMG needs both the certificate and its private key, which need to be in .pem format. An overview document on certificates can be found here:

About certificates
http://www.symantec.com/business/support/index?pag...

For the issuer to be trusted, you need to update the Certificate Authority section with the CA cert and any chains needed. Information on how to import these certificates is documented in this KB:

Adding a CA or an intermediate certificate
http://www.symantec.com/business/support/index?pag...

Since this certificate was created outside the Messaging Gateway appliance, you will need to locate its private key which was used when generating the certificate. I don't know the process you used for generating the certificate, so I won't be able to tell you how to locate that private key. Once you have located it though, you will need to make sure it is unlocked so it can be imported into the Messaging Gateway with the certificate.

For information on importing a certificate along with its private key into the Messaging Gateway, please refer to this KB:

Installing Certificate Authority (CA) signed certificates without corresponding Certificate Signing Request (CSR) on Symantec Messaging Gateway (SMG)
http://www.symantec.com/business/support/index?pag...

If the certificate(s) are not in .pem format they will need to be converted before import. There are many articles on the internet about converting certificates between different formats.

Regards,
Art

If you find a useful post, please use the "thumbs up" feature to mark the post as helpful. If your question has been answered, please select the "Mark as solution" for the post that best answered your question. Thank you.