Installing an SSL Certificate

Follow the steps below to install the SSL certificate in the product.

• Enable SSL in Cloud Security Plus.
• Navigate to Settings > Product settings > Connection > Enable SSL Port.
• Check the SSL Port [https] check-box and click Save.
• Stop Cloud Security Plus by clicking on Start → All Programs → Cloud Security Plus → Stop Cloud Security Plus. If you have installed Cloud Security Plus as a service, then stop the service by clicking Start → Run → type Services.msc → Stop ManageEngine Cloud Security Plus.
• Export the PFX/PKCS#12 certificate file.

Export and save your PFX/PKCS12 file under the <installation_dir>\conf folder.

Note: If you have an SSL certificate in the standard PEM, DER/Binary, or P7B/PKCS#7 format, convert it to the PFX/PKCS#12 format and continue the following steps.
• Edit Server.xml file to include the wildcard certificate
• Now open the server.xml file present in <installation_dir>\conf folder in a text editor of your choice.
• Go to the end of the XML file and search for the connector tag (that starts with, <Connector SSLEnabled=”true” ……/>).
• Now, edit the following values inside that connector tag:

keystoreFile=”./conf/YOUR_CERT_FILE.pfx”
keystorePass=”CERTIFICATE_PASSWORD”
keystoreType=”PKCS12”

• E.g.: <Connector SSLEnabled="true" acceptCount="100" clientAuth="false" connectionTimeout="20000" debug="0" disableUploadTimeout="true" enableLookups="false" keystoreFile="./conf/YOUR_CERT_FILE.pfx" keystorePass="CERTIFICATE_PASSWORD" keystoreType="PKCS12" maxSpareThreads="75" maxThreads="150" minSpareThreads="25" name="SSL" port="443" scheme="https" secure="true" sslProtocol="TLS"/>
• Start Cloud Security Plus.