To install your SSL certificate, you will need to do the following:
Part 1: Install the Root CA
1
Download the appropriate Root CA from below and save as globalsign_root.txt:
DomainSSL & OrganisationSSL:
http://www.globalsign.com/support/root-globalsign.html
ExtendedSSL:
http://www.globalsign.com/support/root-globalsign-rc2.html
2
Start the key management utility (IKEYMAN).
3
Open the key database file that was used to create the certificate request.
4
Enter the password, and then click OK.
5
Select Signer Certificates and then click Add.
6
Click Data type, and select a data type, such as Base64-encoded ASCII data. This data type must match the data type of the importing certificate.
7
Browse and select globalsign_root.txt.
9
Enter a label for the importing certificate.
The Signer Certificates field displays the label of the signer certificate you added.
Part 2: Install the Intermediate(s)
1
Download the appropriate Root Validation CA (Intermediate) from below and save as globalsign_intermediate.txt:
DomainSSL:
http://www.globalsign.com/support/root-domainssl.html
OrganisationSSL:
http://www.globalsign.com/support/root-organizationssl.html
ExtendedSSL:
http://www.globalsign.com/support/root-extendedssl.html
Please note: For Extended SSL copy both the intermediate and cross certificate into the same file.
2
Start the key management utility (IKEYMAN).
3
Open the key database file that was used to create the certificate request.
4
Enter the password, and then click OK.
5
Select Signer Certificates and then click Add.
6
Click Data type, and select a data type, such as Base64-encoded ASCII data. This data type must match the data type of the importing certificate.
7
Browse and select globalsign_intermediate.txt.
9
Enter a label for the importing certificate.
The Signer Certificates field displays the label of the signer certificate you added.
Part 3: Install the SSL Certificate
1
Copy your SSL Certificate into a text editor and save as yourdomain.cert.
2
Open the IBM Key Management utility (IKEYMAN).
3
In the centre of the IKEYMAN display you will see a section called Key Database content.
4
Click on the down arrow to the right to display a list of three choices.
5
Select Personal Certificates.
6
From the Personal Certificates section, click the Receive button.
7
Leave Data Type set to default (Base64-encoded ASCII data).
8
Browse and select yourdomain.cert.
9
Click OK on this dialog box.
10
Finally, restart your server.