Using internally created certificate for IP-HTTPS lisenter temporarily during testing. Any issues?

We are planning our Direct Access environment now and plan to also use SSTP VPN on the same box.
I understand that the best practice is to use a certificate published by a public CA for the outward facing IP-HTTPS listener and we plan to do this however during testing we would like to use a certificate created from our internal CA. If our testing phase
is successful and we plan to go ahead we would then buy a public CA certificate and replace the internally created one.
I would just like to know how much of an issue/hassle it would be to do this. I believe that during the DA setup wizard it automatically inserts the certificates you provide. Is it a problem to change it afterward? Do you have uninstall DA and run through the
wizard again? Thanks.

Or you can use a Public 30-day trial SSL that is supported on all Clients.
The hassle of changing it, will be the same as when you are renewing a public SSL certificate in the future. And yes, you have to re-run the wizard again, after you have imported the new SSL certificate on the DA server.

Similar Messages

  • What programming language is used to create applicaitons for the iPad

    I was curious what programming language is used to create applications for the iPad.

    http://developer.apple.com/ipad/sdk/

  • Using existing SSL Certificate for Web Dispatcher

    Hi,
    We've registered a SSL certificate with wildcard option via GlobalSign. The history of this process is as below:
    1. We created a Certificate Request with IIS and send it to GS (GlobalSign).
    2. They send us the certificate file Globalsign Primary Secure Server CA and Globalsign Server Sign CA files.
    3. Import all ceritifcates into IIS and then exported the certificate into a Cert.pfx file.
    4. By using this file, we are able to import the SSL certificate into J2EE WAS 640  of Portal system.
    5. Now we want to use same certificate to establish a web dispatcher installation as intermediate server for internet access.
    Web Dispatcher documentations says to create a pse and req file with sapgenpse program and then send it to CA (here globalsign) to get a certificate.
    But when we asked GS, they told us to use the certificate they send us before. They cannot create a certificate file for the ourput of web dispatcher. It will be billed us if we persist.
    So, we have to find a way to use the existing certificate to enable SSL of Web Dispatcher.
    Any idea?

    Hi Huseyin,
    I also have the same scenario. We also want to use the same certificate from verisign for our webdispatcher.
    Do you know how to do. Can you help me.
    Thanks and Regards,
    Sailesh K

  • I'm migrating a WP site to BC. I want to use a web app for their Blog...is there any way to have the web app item show in the root url vs root-url/web-app-name/web-app-item-name?

    I'm migrating a WP site to BC. I want to use a web app for their Blog...is there any way to have the web app item show in the root url vs root-url/web-app-name/web-app-item-name?

    Hi Justin,
    There's nothing like that atm. Please see http://forums.adobe.com/message/4730854
    Cheers,
    -mario

  • HT201301 Can vmware player be used to create windows pc and mac.  Will I need any other software or hardware to do that?

    Can vmware player be used to create windows pc and mac.  Will I need any other software or hardware to do that?(Have Windows and Mac on same computer)

    Since you posted this in the iPod Touch forum and didn't provide enough information to contradict that I am going to say the it can't be done. VMWare does work in iPods.
    Allan

  • If we dont want to use sleep/wakeup button for dissconnect the call so there is any other option for dissconnect the call without using sleep/wakeup button in ios 8.1.3. kindly suggest

    if we dont want to use sleep/wakeup button for dissconnect the call so there is any other option for dissconnect the call without using sleep/wakeup button in ios 8.1.3 . kindly suggest..!

    Hello kumar kalptaru, 
    Thank you for participating in the Apple Support Communities. 
    It sounds like you're wondering how to hang up a call besides using the Sleep/Wake button. 
    Other than this, you can tap the red hang up button on the Phone app. See the iPhone User Guide for more help:
    While on a call - iPhone
    End a call. Tap  or press the Sleep/Wake button.
    Best Regards,
    Jeremy 

  • How to use an existing certificate for the ABAP SSL setup using STRUST

    Hi
    All the documentation say to Create certificate Request and subsequently import the Certificate response from a CA.
    In our case, the company has a certificate from a valid CA root and we would like to use this when creating the SSL PSE files, in particular, the SSL Server PSE.
    Should I use sapgenpse instead of strust??
    What are the steps to apply the certificate (www.company.com.au) to this instance (host.dom.internal)??????
    Thanks
    Doug

    Hi Dough,
    pls chk out this for SSL certificate
    http://help.sap.com/saphelp_nw04/helpdata/en/20/37c33ae8361838e10000000a11402f/frameset.htm
    http://help.sap.com/saphelp_nw04s/helpdata/en/20/37c33ae8361838e10000000a11402f/frameset.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/16/1bb23bdb0d0156e10000000a11402f/frameset.htm
    http://help.sap.com/saphelp_nw04s/helpdata/en/16/1bb23bdb0d0156e10000000a11402f/frameset.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/c1/96b13b6e95b72ce10000000a114084/frameset.htm
    http://help.sap.com/saphelp_nw04s/helpdata/en/c1/96b13b6e95b72ce10000000a114084/frameset.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/e1/b6b13bd0ac933ae10000000a11402f/frameset.htm
    http://help.sap.com/saphelp_nw04s/helpdata/en/e1/b6b13bd0ac933ae10000000a11402f/frameset.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/aa/a8463c6796e61ce10000000a114084/frameset.htm
    pls reward points
    Thanx
    Metha

  • Install SSL certificate for Oracle HTTP server

    I received a PFX file that contains an SSL wildcard certificate for our company *.xyz.com.
    I used this tool "xca" to extract two files: "server.crt" and "serverkey.pem".
    I want to install this on the oracle 11g HTTP server (OHS) installed as standalone based on apache 2.2
    With oracle, i have to create a wallet and point the SSL.CONF wallet directive to use that wallet.
    I used Oracle Wallet Manager to create it and import the certificate but this is where i am having a problems.
    First I could not restart the web server but the it worked but I got SSL handshake errors (Shown below).
    According to oracle steps, I have to create a CSR and then import the certificate into the wallet
    http://www.apache.com/resources/how-to-setup-an-ssl-certificate-on-apache/
    However, when I tried to use Oracle Wallet Manager, there were two options: import server certificate and trusted certificate.
    The import server certificate was greyed out. I had to create a CSR just to get it enabled but I did not use the CSR, i just imported the "server.crt" file.
    I also tried to import the "serverkey.pem" into the trused certificate option but was rejected (invalid certificate).
    Do you know how to create a successful wallet based on the files i have and not creating a CSR since i already have a certificate file?
    2013-05-04T20:11:40.2718-04:00] [OHS] [ERROR:32] [] [core.c] [host_id: ptp.xyz.xom] [host_addr: 10.72.11.211] [pid: 11339] [tid: 1253263680] [user: root] [VirtualHost: ptp.xyz.xom:443] nzos handshake error, nzos_Handshake returned 29040(server ptp.xyz.xom:443, client 10.60.117.121)
    [2013-05-04T20:11:40.2719-04:00] [OHS] [ERROR:32] [] [core.c] [host_id: ptp.xyz.xom] [host_addr: 10.72.11.211] [pid: 11339] [tid: 1253263680] [user: root] [VirtualHost: ptp.xyz.xom:443] NZ Library Error: Unknown error
    [2013-05-04T20:11:40.4774-04:00] [OHS] [ERROR:32] [] [core.c] [host_id: ptp.xyz.xom] [host_addr: 10.72.11.211] [pid: 11339] [tid: 1263753536] [user: root] [VirtualHost: ptp.xyz.xom:443] unusably short session_id provided (0 bytes)
    [2013-05-04T20:11:40.4776-04:00] [OHS] [ERROR:32] [] [core.c] [host_id: ptp.xyz.xom] [host_addr: 10.72.11.211] [pid: 11339] [tid: 1263753536] [user: root] [VirtualHost: ptp.xyz.xom:443] nzos handshake error, nzos_Handshake returned 29040(server ptp.xyz.xom:443, client 10.60.117.121)
    [2013-05-04T20:11:40.4776-04:00] [OHS] [ERROR:32] [] [core.c] [host_id: ptp.xyz.xom] [host_addr: 10.72.11.211] [pid: 11339] [tid: 1263753536] [user: root] [VirtualHost: ptp.xyz.xom:443] NZ Library Error: Unknown error
    [2013-05-04T20:11:40.6814-04:00] [OHS] [ERROR:32] [] [core.c] [host_id: ptp.xyz.xom] [host_addr: 10.72.11.211] [pid: 11339] [tid: 1274243392] [user: root] [VirtualHost: ptp.xyz.xom:443] unusably short session_id provided (0 bytes)
    [2013-05-04T20:11:40.6816-04:00] [OHS] [ERROR:32] [] [core.c] [host_id: ptp.xyz.xom] [host_addr: 10.72.11.211] [pid: 11339] [tid: 1274243392] [user: root] [VirtualHost: ptp.xyz.xom:443] nzos handshake error, nzos_Handshake returned 29040(server ptp.xyz.xom:443, client 10.60.117.121)
    [2013-05-04T20:11:40.6816-04:00] [OHS] [ERROR:32] [] [core.c] [host_id: ptp.xyz.xom] [host_addr: 10.72.11.211] [pid: 11339] [tid: 1274243392] [user: root] [VirtualHost: ptp.xyz.xom:443] NZ Library Error: Unknown error

    I do not have weblogic installed. I only have standalone 11g HTTP server with mod_plsql.
    If i can get OWM working to create a successful certificate them the problem would be resolved.
    I am just not sure what is Root Certificate and Trustworthy Certificate and how to get that from the files i have.

  • Question about creating Certificates for Out of Band management

    I would like to use out of band management for supporting clients in remote offices.  I am following the instructions at http://technet.microsoft.com/en-us/library/230dfec0-bddb-4429-a5db-30020e881f1e#BKMK_AMT2008_cm2012 in the "Deploying Certificates
    for AMT" section.  It says:
    If you cannot complete steps 18 or 19, check that you are using the Enterprise Edition of Windows Server 2008. Although you can configure templates with Windows Server Standard Edition and Certificate Services, you cannot deploy certificates using modified
    certificate templates unless you are using the Enterprise Edition of Windows Server 2008.
    My Certificate Authority server is Server 2008R2 Standard.  When I right click on Certificate Templates -> New -> Certificate Template to Issue, I do not see the ConfigMgr AMT Provisioning and ConfigMgr AMT Web Server Certificates.  I know
    the box says 2008 Standard isn't supported, but I am using 2008R2 Standard, not 2008.  Why am I not able to see either certificate.  If it is because I am using the Standard Edition, than how can I create the certificates needed?  Upgrading
    to Enterprise is not an available solution (cost reasons).  Does this mean that OOB management certificate creation is not supported on Server 2008R2 Standard, and so I will not be able to use ConfigMgr 2012 SP1 for out of band management because I am
    unable to generate the required certificates?

    Yes, I know this is an old post, but I’m trying to clean them up. Did you solve this problem, if so what was the solution?
    In order to use the cert template, you must use an Enterprise version of Windows. Only the Enterprise (or datacenter) version have the right version of the Certificate server.
    Garth Jones | My blogs: Enhansoft and
    Old Blog site | Twitter:
    @GarthMJ

  • Is it possible to use single ssl certificate for multiple server farm with different FQDN?

    Hi
    We generated the CSR request for versign secure site pro certificate
    /* Style Definitions */
    table.MsoNormalTable
    {mso-style-name:"Table Normal";
    mso-tstyle-rowband-size:0;
    mso-tstyle-colband-size:0;
    mso-style-noshow:yes;
    mso-style-priority:99;
    mso-style-qformat:yes;
    mso-style-parent:"";
    mso-padding-alt:0in 5.4pt 0in 5.4pt;
    mso-para-margin:0in;
    mso-para-margin-bottom:.0001pt;
    mso-pagination:widow-orphan;
    font-size:11.0pt;
    font-family:"Calibri","sans-serif";
    mso-ascii-font-family:Calibri;
    mso-ascii-theme-font:minor-latin;
    mso-fareast-font-family:"Times New Roman";
    mso-fareast-theme-font:minor-fareast;
    mso-hansi-font-family:Calibri;
    mso-hansi-theme-font:minor-latin;}
    SSL Certificate for cn=abc.com   considering abc.com as our major domain. now we have servers in this domain like    www.abc.com,   a.abc.com , b.abc.com etc. we installed the verisign certificate and configured ACE-20 accordingly for ssl-proxy and we will use same certificate gerated for abc.com for all servers like www.abc.com , a.abc.com , b.abc.com etc. Now when we are trying to access https//www..abc.com or https://a.abc.com through mozilla , we are able to access the service but we are getting this message in certfucate status " you are connected to abc.com which is run by unknown "
    And the same message when trying to access https://www.abc.com from Google Chrome.
    "This is probably not the site you are looking for! You attempted to reach www.abc.com, but instead you actually reached a server identifying itself as abc.com. This may be caused by a misconfiguration on the server or by something more serious. An attacker on your network could be trying to get you to visit a fake (and potentially harmful) version of adgate.kfu.edu.sa. You should not proceed"
    so i know as this certficate is for cn=abc.com that is why we are getting such errors/status in ssl certficate.
    Now my question is
    1. Is is possible to  remove above errors doing some ssl configuration on ACE?
    2. OR we have to go for VerisgnWildcard Secure Site Pro Certificate  for CSR generated uisng cn =abc.com to be installed on ACE  and will be used  for all servers like  www.abc.com , a.abc.com etc..
    Thanks
    Waliullah

    If you want to use the same VIP and port number for multiple FQDNs, then you will need to get a wildcard certificate.  Currently, if you enter www.abc.com in your browser, that is what the browser expects to see in the certificate.  And right now it won't beause your certificate is for abc.com.  You need a wildcard cert that will be for something like *.abc.com.
    Hope this helps,
    Sean

  • Using internal SSL Certs for Webview and Reskill (ICM 7.2.X)

    Hi,
    I would like to use corporate ssl certs for webview and reskill to avoid the user having to install the self signed certificate on the local machine. Has anyone any experience of this? Can it cause any unforseen problems?
    My plan for webview is to create the certificate request in IIS for the default website, use this csr to generate the cert, then complete it by uploading the certificate.
    For reskilling, I will assume I will have to do some command line stuff here ...
    eg: keytool -genkey -keyalg RSA -keystore hostname.key
    to create the key,
    keytool -certreq -keyalg RSA -keystore hostname.key -file hostname.csr
    to create the csr, and
    keytool -import -trustcacerts -alias tomcat -file hostname.cer -keystore hostname.key
    to import the new cert
    Suggestions or comments for anyone who has tried this before would be appreciated.
    Regards,
    Brian

    I've never done it on a version so old, but at the end of the day it's just IIS and Tomcat and importing an SSL cert is very standard.
    david

  • Creating certificates for a subdomain

    Hi!
    I want to create a certificate for two domains:
    www.mysite.com
    mysite.com
    I could be possible to create only one certificate with some regular expression or wildcard, or I have to create two certificates with the explicit name of each domain.
    Thank you in advance.

    I've found the answer by myself.
    Yes, the wildcards are allowed in certificates.
    I can use *mysite.com, the problem is that this option will include not only www.mysite.com and mysite.com but also anyother url that ends with mysite.com.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           

  • Why do BT use an invalid certificate for signing e...

    Hello BT mods,
    In your online guides on setting up email, the instructions advise specifying the outgoing mail server as mail.btinternet.com, with SSL enabled. However, the certificate used to sign the connection is invalid! (This is because of a host name mismatch due to using a yahoo certificate) 
    This is pretty bad practise and doesn't help non-technical people understand online security! Is this mismatch going to get rectified, or do BT simply plan to tell customers to trust an invalid certificate?
    Cheers,
    --jenger

    See point 12 right at the end, the screenshot shows SSL ticked.
    http://bt.custhelp.com/app/answers/detail/a_id/996​0/kw/mail%20setup%20os%20x/related/1
    Looking at it again, point 11 shows to leave outgoing SSL unticked, which is not how I remember it from earlier in the week - not sure if this has been updated since I reported it by phone or not, I remember the previous point as including a tick for SSL enabled as well though.
    Incidentally, it would appear to work with outgoing SSL both enabled and disabled - I'd been running with SSL enabled for years, TBH this only came to light after I had problems sending email at the beginning of the week.
    I did call the helpdesk, which was A Bad Idea, as I not only got conflicting info from two different reps, but the first one managed to delete all the historical mail in my inbox, thanks for that! My own fault really, I should have known better than to let someone onto my computer with GotoAssist!  (And to be fair, the second guy I spoke to was actually really good, knew what he was talking about and everything. Just a shame my mail had already been deleted by then!)
    These forums are a MUCH better resource! )

  • Using an SSL certificate for Exchange 2013

    Hi,
    I am not sure if this is the correct forum to post this question in.
    Basically we are migrating from Exchange 2007 to Exchange 2013. Our 2013 machines have both roles installed and do everything. They are configured in a DAG. We have no hardware load balancing/reverse proxy or etc. inside or outside.
    We use an alias of mail.domain.com to connect to OWA/ActiveSync and etc from the Internet.. this alias would point to mail1.domain.com which is the IP of the first Exchange 2013 server.
    If that server were to break, we would point the alias of mail.domain.com to mail2.domain.com which is the IP of the second Exchange 2013 server. Clients would not need any changes before they started connecting to the remaining mail server (eventually)
    and email would continue.
    I know this is not an ideal setup, but for now it is what we have and would keep us running in the event of server failure.
    My question is, when I request a certificate, do I need two of them with mail1.domain.com and mail2.domain.com as their primary and SAN of mail.domain.com OR do I request one certificate with mail.domain.com as the primary host and SAN of mail1.domain.com
    and mail2.domain.com (and install the one certificate on both servers).
    I want to include mail1.domain.com and mail2.domain.com as this can be helpful for testing and/or during migration.
    I hope that makes some sense and appreciate any help people can offer.
    Thanks!

    You do not need server names in the certificate if you are using mail.domain.com only in all of the URL settings.  You will want autodiscover.domain.com, however.
    Consider configuring a different internal and external name for Outlook Anywhere so that Outlook knows whether it is connecting from the Internet or internally.  For internal Outlook Anywhere, use a name that you don't publish to the Internet. 
    For example, use mail.domain.com for everything except internal Outlook Anywhere, use mailinternal.domain.com.  Put mail.domain.com, mailinternal.domain.com and autodiscover.domain.com in the certificate.
    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

  • Creating listener for incoming http requests

    Hi,
    I am trying to create a server for incoming http requests.
    I am using Connector.open("socket://:5555") call to bind to the server socket.
    I have give permission for Connector.socket, as well as Connector.http to this application.
    The server is able to accept connections when the client connects using socket://localhost:5555, but does not accept any incoming connection when the client connects using http://localhost:5555.
    How can I create a service on my mobile which will accept http requests.
    Thanks,
    Debashis

    Allistair,
    One thing that might help you is an understanding of the Oracle database JVM architecture. Here's a DOC which you might find interesting:
    http://otn.oracle.com/products/oracle8i/pdf/Oow_BestPractices.pdf
    Hope this helps,
    -Dan
    http://www.compuware.com/products/devpartner/db/oracle_debug.htm
    Debug PL/SQL and Java in the Oracle Database

Maybe you are looking for

  • ALV How to save a variant?

    Hi experts, how can I save a layout variant? So I declared a variant, and put into reuse_alv_grid_display, but doesn't work instead of this. What could be the problem with it? DATA: g_variant like disvariant. CALL FUNCTION 'REUSE_ALV_GRID_DISPLAY' EX

  • Can I bulk delete duplicate pictures in Elements 11?

    I imported about 2600 pictures from iPhoto to Elements 11 on my iMac OS 10.8.2.  Now there are hundreds of duplicates; deleting one at a time is a real pain.  Can I identify and bulk delete duplicates in Elements 11?

  • CS3 Insertion Form Wizard double entries

    Running CS3 in Leopard with PHP & MySQL db. The Insertion Form Wizard works fine but creates 2 identical records in the db when inserted. Any thoughts? Regards to the forum.

  • Use of link, alink, and vlink - need "good" example for my APEX app

    Hi anyone, I have a report with values in the "Last Name" column that links to another page (page 4) that opens when any last name in the said column is clicked on. However, before the last name link is clicked on its color is blue; but I want the li

  • Customer Listing

    Hi, I am using the following query to get customer listing. When I run the statement for one party_id in the first select statement, it works but if I remove that condition I get Ora-01427 error... select distinct ( select hl.address1 from hz_cust_ac