File Share Encryption

Hello

I am trying upload certicate to Uniwersal serwer 3.3.2

Firts I do http://www.symantec.com/docs/TECH168224

Upload  Intermediate Certificates

I have certificate in format pfx. but I can't import from  System/Network because I want use it to SSL/TLS communicate.

Wildcart certificate is supported?

CSR is obligation to do ? Because I have Wildcard certificate I don't create CSR only want import certificate.

It is in pfx format.   

 

Hi przemek,

Please review these articles:

How to Install a SSL Certificate on Symantec Encryption Management Server - HOWTO48413
"SEMS/PGP Universal Server accepts PKCS 12 and Apache formatted certificates."

Certificate Import Failed on PGP Universal Server - TECH149055
"Many Certificate Authorities will return the certificate in .PEM format (Privacy Enhanced Mail Certificate) as a file. The PGP Universal Server will not accept this format and must be converted to .PKCS12 format (Personal Information Exchange Syntax Standard)."

You can convert it with OpenSSL, for instance.

CSR is not mandatory if you generate a self-signed certificate.

Rgs,
dcats

So If I want Certificate from another CA I must generate CSR?

Because as I wrote I have  certificate in pfx format but not generate CSR and can't import to US

 

Hi przemek, Yes. If you want a CA to sign your certificate you need to generate a CSR. This is not mandatorily done in SEMS. A pfx might have the same content as expected for p12. You can try changing the extension and see if works. Otherwise you should be able to import/export from Windows certmgr.msc with p12 extension. HTH, dcats

Thanks for help

Convert to pfx on key and crt and still the same problem.

I'm trying import to windows store and export than import to US but still the same sitation.

When testing whit my CA  in lab. CA is on windows (I don't generate CSR  simply certificate ) US import certificate.

Hi przemek,

Have you seen any specific error message in the server logs?
You can also check which are the Flags set for that certificate. Open a CMD and type: certutil -v file_name.pfx

 

HTH,
dcats

Hello

Finaly after update SEMS to 3.3.2mp1 I can import this certificate !!!