How to Install Server Certificates

1) Sun Web Server -> Admin Console -> Server Certificates
2) Bunch of steps to get to "Step 3: Enter Certificate Data"
Paste the following in the textarea:
-----BEGIN RSA PRIVATE KEY-----
MIICWwIBAAKBgQCv8WAOuA5eohKYuHo0Us7riIDy50a9/mmtSmkR3Libd1Kv51IE
7nE86bnsEYGG6JRxnDI207DAQ2k1UZxonoJ3D24K0g==
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
MIIBuzCCASSgAwIBAgIGARatBajmMA0GCSqGSIb3DQEBBQUAMCExHzAdBgNVBAMM
w/1y6NyccF7+/7nIntaT
-----END CERTIFICATE-----3) Finish up the rest of the steps.
I get:
An error has occurred
com.sun.web.admin.exceptions.AdminException: ADMIN4112: No Private key foundWhat did I do wrong?

It seems you didn't generate the certificate based in a certificate request generated via the webserver console.
The full steps to install a certificate are:
1. Create the certificate database in webserver console(Sun Web Server -> Admin Console -> Server Certificates). You must enter a passphrase.
2. Create a certificate request in webserver console.
3. Sign the certificate request and generate the certificate with your CA (can be verisign)
4. Install the certificate in webserver.
Hope it helps.

Similar Messages

  • How to install SSL certificate on the second ACE in the HA pair

    Hi,
    I'm struggling to figure out how to install a certificate (.p7b and .crf) on my second ACE in a HA pair.
    On ACE01 i generated a CSR and gave the details to our SSL provider, they provided the certificates and i imported them. All good there.
    How can i install the same SSL on ACE02 if i haven't generated a CSR on my backup devicde, or do i generate a CSR and import the same certificate?
    Since bringing the ACE's into HA all contexts have sync'd and the backup ACE is in 'hot standby' state. But one context fails the sync and i think this is because the SSL certificate is not installed correctly on the second ACE02.
    Anybody got any ideas, suggestions?
    Cheers

    Hi,
    If you already have the cert and key on the Active ACE, then you just need to export them using "crypto export ..." command from Active ACE and then import to the standby ACE using "crypto import ..."
    Regards,
    Siva

  • How to install a certificate in OC4J

    Hi I want to connect a server from a java method in Jdeveloper (from local machine) using api which needs a certificate to be installed in the caller.
    I have installed the certificate in my machine by clicking the certficate file and clicking the Install Certificate option.
    But still the error is comming. Do I need to add the certificate somewhere in Jdeveloper? How?
    The error message is:-
    Establishing the LDAPConnection with the below env params =>
    {java.naming.provider.url=ldap://ldapu.xyz.gov.sg:636, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.ldap.version=3, java.naming.security.principal=uid=userx,ou=employee,o=xyz,c=sg, java.naming.security.authentication=simple, com.sun.jndi.ldap.connect.pool=true, java.naming.security.credentials=password, java.naming.security.protocol=ssl}
    Establishing the LDAPConnection with the below env params =>
    {java.naming.provider.url=ldap://ldapu.xyz.gov.sg:636, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.ldap.version=3, java.naming.security.principal=uid=dbc13,ou=employee,o=xyz,c=sg, java.naming.security.authentication=simple, com.sun.jndi.ldap.connect.pool=true, java.naming.security.credentials=password, java.naming.security.protocol=ssl}
    javax.naming.CommunicationException: simple bind failed: ldapu.xyz.gov.sg:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]
    Establishing the LDAPConnection with the below env params =>
    {java.naming.provider.url=ldap://ldapu.xyz.gov.sg:636, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.ldap.version=3, java.naming.security.principal=uid=dbc13,ou=non-employee,o=xyz,c=sg, java.naming.security.authentication=simple, com.sun.jndi.ldap.connect.pool=true, java.naming.security.credentials=password, java.naming.security.protocol=ssl}
    Establishing the LDAPConnection with the below env params =>
    {java.naming.provider.url=ldap://ldapu.xyz.gov.sg:636, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.ldap.version=3, java.naming.security.principal=uid=dbc13,ou=non-employee,o=xyz,c=sg, java.naming.security.authentication=simple, com.sun.jndi.ldap.connect.pool=true, java.naming.security.credentials=password, java.naming.security.protocol=ssl}
    javax.naming.CommunicationException: simple bind failed: ldapu.xyz.gov.sg:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]
    Creating ldapContext for user =>uid=dbc13,ou=employee,o=xyz,c=sg
    Establishing the LDAPConnection with the below env params =>
    {java.naming.provider.url=ldap://ldapu.xyz.gov.sg:636, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.ldap.version=3, java.naming.security.principal=uid=dbc13,ou=employee,o=xyz,c=sg, java.naming.security.authentication=simple, com.sun.jndi.ldap.connect.pool=true, java.naming.security.credentials=password, java.naming.security.protocol=ssl}
    Establishing the LDAPConnection with the below env params =>
    {java.naming.provider.url=ldap://ldapu.xyz.gov.sg:636, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.ldap.version=3, java.naming.security.principal=uid=dbc13,ou=employee,o=xyz,c=sg, java.naming.security.authentication=simple, com.sun.jndi.ldap.connect.pool=true, java.naming.security.credentials=password, java.naming.security.protocol=ssl}
    javax.naming.CommunicationException: simple bind failed: ldapu.xyz.gov.sg:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]
    [Ljava.lang.StackTraceElement;@193385dsg.gov.xyz.ldap.base.LDAPException: Unable to connect to the server.[simple bind failed: ldapu.xyz.gov.sg:636]
    Thanks in advance
    Sam
    Edited by: Sam on Nov 16, 2010 9:50 PM

    Hi. To SSL comunication between the local machine and remote server with jndi, only need install or register the ca-certificate with keytool in the local machine. This instructions can help you:
    /oracle/oas/10.1.3.1/soa/jdk/bin/keytool -import -keystore /oracle/oas/10.1.3.1/soa/jdk/jre/lib/security/cacerts -trustcacerts -file /oracle/certificates/DcDg04Cert2.cer -alias alias_name -storepass store_pass
    Bye.

  • How to install client certificate in Jdeveloper 10.1.3.41.57

    Hi,
    We need to connect to another website by presenting client certificate. This certifficate is provided by this website and password is required. Though I tried to tried to launch the JSP that redirects the page to the URL to connec to that website, and I imported the certifcate to the browser, I am still asked credential to connect.
    I was told by other people I need to install the client certificate on the server.
    My question is that how I install this client certificate on Jdeveloper 10.1.3.41.57 and launch JSP to connect to that website?
    the certificate is like xxx2_x.509Cert.pfx.
    Please help
    Thank you.
    jfu

    First, thank you so much for your reply. Yes, it works. I did converted pfx to JKS successfully.
    i use keytool -list to view this JKS file. I can see the content. The chain length is 2.
    However, I got error same error message when I tried to use above command to import JKS to cacerts under jdk/jre/lib/security/; if I add -storetype pKCS12, I got another error keytool error: java.io.IOException: DerInputStream.getLength(): lengthTAg=109, too big.
    Please help.
    Thanks,
    Jfu
    Edited by: 872272 on Sep 20, 2011 8:58 AM

  • How to install personal certificate on N95?

    Hi,
    Does anyone know how to install a personal certificate on the N95? I need to connect to my office WLAN using Radius authentication. I have tried to bluetooth the .cer file to the phone and it does not recognize the file or install it. I am familiar with all of the WPA settings (EAP-Peap-MSCHAP v2....etc) which do not work or seem to work without the personal cert.
    Thanks,
    Greg

    I also need to import a personal certificate on a N95 for synchronization with the company exchange server.
    I tried to import thru bluetooth in a .p12, .cer format. I tried also to modify the certificate with openSLL.
    It seems that is not possible to import personal certificate exported from the exchange server on a N95!!
    The support site answered me just to import it in a .p12 format. I'm not dummy, I know what I did, I just become a message that the file is corrupt, but I can use this certificate on all other mobiles!
    I will change to a Sonyericsson P1, or do someone know how to solve the problem? Also the support didn't tell me when there will be a version 13 of the firmware, if the problem is known and if is possibile to downgrade to version 10.

  • How to Install CA Certificates in B2B

    Hello
    I am new to B2B and I got CA and trusted certificates from our client. I used KeyStore tool and loaded all CA and trusted certificates and generated .jks file and used in the B2B certification section. With this I am able to connect to the client server and able to send the files successfully. But Client saying that they are not able to connect to my server and getting below error. They are saying that to install CA and trusted certificates. Can anybody guide us how to install them?
    HTTPClientMethodService resumed with error.
    HTTPClientAdapter [GWW_HTTP_CLIENT_ADAPTER_N2-3]
    ServiceStartTime [2015-01-16 14:47:50.37]
    ServiceEndTime [2015-01-16 14:47:50.586]
    SessionToken [GWW_HTTP_CLIENT_ADAPTER_N2-3_HTTPClientAdapter_node3AC2_142144127032096:3845756]
    HTTP Status Code: 404
    HTTP Reason Phrase: Not Found

    Configuring Commercial certificates on weblogic server
    http://weblogictips.wordpress.com/2008/07/27/configuring-commercial-certificates-on-weblogic-server/
    How to debug SSL issues with weblogic server
    http://weblogictips.wordpress.com/2010/05/11/how-to-debug-ssl-issues-with-weblogic-server/
    Steps to create self sign certificates for weblogic server
    http://weblogictips.wordpress.com/2008/07/27/steps-to-create-self-sign-certificates-for-weblogic-server/
    thanks,
    sandeep

  • How to install server on additional Macs?

    I have the mid-2011 Mac Mini Server.
    How do I install server on additional Macs if I want?  If I am not mistaken, by purchasing the Mini Server, I qualify to put Server on some additional Macs if desired?
    Thank you.

    But will the install of iLife 11 retail DVD downgrade or effect negativly the already installed iLife package?
    No, iDVD is tested on the latest Macintoshes.
    I came to the conclusion that I need to find a copy of the iLife 11 Retail DVD to get iDVD installed, right??
    Make a couple of phone calls.
    iDVD is a “Must Have".   (Yes, it should be included.)
    Call Apple they will sent out iDVD at no charge.
    800-692-7753
    800-275-2273
    Most people report that by asking here:   http://www.apple.com/feedback/idvd.html
    or here:   http://www.apple.com/contact/
    they got a free copy of iDVD.
    If that doesn't work you can purchase iLife 11 on disk (don't get the download) for about $39.

  • Newbie seeking full instructions on how to install Server on Yosemite

    Hi All,
    As the title says, I'm looking for help in the form of instructions to install my server on Yosemite. I have tried twice, until 4:30 am in the morning, without luck. Ughhh!
    I would seriously appreciate some guidance or pointing to where i can find a comprehensive tutorial.
    Thanks so much,
    Jap
    Mackbook Pro 13 Inch Retina Display (2013 model)
    Yosemite OS X 10.10

    Please help me with the step by step instructions on how to install a Windows server 2008 on a computer that has Windows 8 installed on it without formatting windows 8.Please email the steps , Thanks
    Assuming your rig can support virtual machines, you can use Hyper-V and run another OS there.
    Better practice however is to use a dedicated machine and use remote desktop to the server.
    Corsair Carbide 300R with window
    Corsair TX850V2 70A@12V
    Asus M5A99FX PRO R2.0 CFX/SLI
    AMD Phenom II 965 C3 Black Edition @ 4.0 GHz
    G.SKILL RipjawsX DDR3-2133 8 GB
    EVGA GTX 6600 Ti FTW Signature 2(Gk104 Kepler)
    Asus PA238QR IPS LED HDMI DP 1080p
    ST2000DM001 & Windows 8.1 Enterprise x64
    Microsoft Wireless Desktop 2000
    Wacom Bamboo CHT470M
    Place your rig specifics into your signature like I have, makes it 100x easier to understand!
    Hardcore Games Legendary is the Only Way to Play!

  • Installing Server Certificate

    've created a self signed certificate using the java keytool. When attempting to install the certificate as a Server Certificate using iPlanet 4.1 Server Manager,I receive an error writing to the certificate file. I can install this same certificate as a Trusted CA certificate.
    Is there anything I should do different when generating the certificate if I'm going to be using it as a server certificate?
    Thanks,
    Bob

    When starting CMS from command line, it starts correctly, but when i'm trying to start from the admin console, it doesn't work. Also, i tried start from command line and open from admin console, but the admin console says "server off" and the server is already started.
    DOES ANYONE KNOW WHAT KIND OF PROBLEM IS THAT???
    thanks,
    Marcelo

  • How to install server on 10.7.1

    i downloaded OS X Lion Server from the app store. installed it and tested it. updated to 10.7.1.
    then i followed apples instructions to remove lion server.
    now, when i try to re-install server, i cannot because my desktop version is 10.7.1, 10.7.0 is required. what to do????

    I had to re-format and re-install.
    Command-R during a reboot got me to the Lion recovery,
    Reformatted with disk utility.
    Reinstalled Lion.
    Went to app store and re-downloaded and re-installed server.
    Then went to http://support.apple.com/downloads and manually installed 10.7.1 server for Mac mini.
    Everything is working great now !

  • How to instal wupos certificate in iphone 5s

    i have installed a certificate of wupos in 5s but it is giving an error "not trusted" after installation

    well, is the certfiicate self signed?  if it's not issued and signed by a legitimate CA, what you're seeing is normal.

  • How to install maintenance certificate and License with solution Manger?

    Hi all,
    Is this possible to install maintenance certificate and License with solution Manger atomatically ?
    Regards,
    Neni

    Hi Swaroop,
    There is a feature in SAP Solution manager through which we can instal the licenses.
    Please see below links,
    http://help.sap.com/saphelp_sm70ehp1_sp23/helpdata/en/41/42b6397c604278b6626f3d570c98c8/content.htm
    http://help.sap.com/saphelp_sm70ehp1_sp23/helpdata/en/89/a7c08d740c4cffb491f98801f17d30/content.htm
    Thanks,
    Jagadish.

  • How to install SSL certificate on Mac OS X 10.8.3 Server 2.2

    Hi,
    In eairler versions of !0.8 / OS X Server 2.2 your where able to install a purchased SSl certificate in the
    Hardware >> Profile Manager Server >> Settings >> SSL Certificate Edit
    I've just done a clean install of 10.8.3 and OS X Server 2.2 but there is no  "SSL Certificate Edit" available.
    How do I install my purchased certificate?
    Thanks,
    John

    sorry for hijacking but I have a related question to do with certificates.
    I had to set up virtual domains manually instead of through the GUI and the server ssl site is now locked to a certificate that is about to expire and no longer needed, I can't change the certificate in the web gui because it was created manually, I can't delete the certificate because it is assigned to the server ssl website and I can't manually edit the conf files to point to a different certificate becasue it breaks it, any ideas?

  • How to get server certificate before sending off confidential content?

    If my mail client knows for example the SHA1 value of TLS/SSL enabled receiving MTA's certificate, subversion of DNS and Root-CAs could be prevented if after establishing the connection, the com.sun.mail.smtp.SMTPTransport.serverSocket were accessible to retrieve that certificate:
    X509Certificate[] certs = null;
    if (serverSocket instanceof SSLSocket) {
    SSLSocket ssl = (SSLSocket) serverSocket;
    certs = ssl.getSession().getPeerCertificateChain();
    byte[] sha1 = MessageDigest.getInstance("SHA1").digest(
    certs[0].getEncoded());
    //TODO now validate with the sha1 you already know
    Unfortunately com.sun.mail.smtp.SMTPTransport (let alone javax.mail.Transport) have a public getServerSocket() or even better a getX509ServerCertificates() method.
    Any other ideas how to get at those certificates short of using gnu classpathx?
    See also http://forum.java.sun.com/thread.jspa?threadID=615422

    I found the solution for server side. We will use Handler. And base on technology to generate web service's stuff (my server using axis, but my client using jaxWS), we have different ways to implement and deploy Handler. My purpose is only write input/output xml message to log, so with my server, I only adjust server-config.wsdd as bellow:
    <deployment
    xmlns="http://xml.apache.org/axis/wsdd/"
    xmlns:java="http://xml.apache.org/axis/wsdd/providers/java">
    <handler name="log" type="java:org.apache.axis.handlers.LogHandler"/>
    <globalConfiguration>
    <requestFlow>
    <handler type="log"/>
    </requestFlow>
    <responseFlow>
    <handler type="log"/>
    </responseFlow>
    </globalConfiguration>
    <transport
    name="http" pivot="java:org.apache.axis.transport.http.HTTPSender"/>
    </deployment>
    But now I still can not control directory and log file name yet (now it's axis.log by default).
    Edited by: mydesktop on Nov 15, 2010 6:20 PM

  • How to install SSL Certificates automatically in Client machine

    Hi All
           I have installed Certificates for SSL in Planning server machine for Planning Web services.While connneting to Server through excel-addin from client machine it is not connecting
     Error is bleow:
    "The underlying connection was closed : could not establish trust relationship for the SSL/TLS secure channel" and then getting the following error
    "The PerformancePoint Server System is currently unavailable"
    I got it this is due to Certification not installed in client machine.
    So i tried to install certificate through IE web browser ..i typed webservices links ..i.e https://servername:443 in address box
    ..not admin console link.Because if i connect to Admin console then i connect to Planning server it is  not showing me the dialog box  " Security Alert "
    So typed direcly  webservices in address box.Then "Security Alert" dialog box opened ,In that i clicked "View Certificate" button and installed manually.Then this problem solved.
    But i want to check this is a way to install cerficate in the client machine or there is any other way to do it automatically...
    Please help me to solve this..
    Thanks
    Abdul

    Abdul,
    The problem seems to be that the certificate authority that created your certificate is no trusted by Windows.... That process of installing the root certificate in the clients machines should not be needed if the ceritifcate is obtained from the right ceritifcate authority...
    Where did you purchased your certificate from?
    Regards,
    Pablo Barvo - MSFT

Maybe you are looking for

  • Logical Profiles in ISE 1.2.1

    I´m having trouble understanding the Logical Profiles.  What I understand from the user guide: http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_prof_pol.html#58510 for those to lazy to read:  You can use the logical

  • How to determine output based on the content of purchase order

    Hi Gurus, I've a typical requirement at my present project. With vendor X we have punchout catalogs. while creation of shopping cart, we are not allowing the user to mix catalog items and non catalog items into the same shopping cart. Once the shoppi

  • Dynex LCD seems to have a faulty digital tuner?

    After WOW cable (and other cable companies) switched to the all digital format, my Dynex LCD started flipping out every time I try to use it. We don't have cable boxes or converter boxes, as we only have a basic package of 80-some channels. WOW told

  • Sender File Adapter Bespoke Module Development

    I have been following the How To ... Create Modules for the J2EE Adapter Engine to create a bespoke module for the Sender File Adapter. Initially all the module does is write a message to the Augit Log. The module has been deployed to XI successfully

  • Question about my ipod and iTunes

    I am stuck! Every time I connect my ipod into iTunes and try to update and then when it says updating ipod, do not disconnect, suddenly a pop up appears and says that iTunes has encountered a problem and needs to close. What do I do???????? Some plea