How to install SSL certificate of .PFX format for 9.4 builds

How to install SSL certificate of .PFX format for 9.4 builds

Installing .PFX Certificate

 

.PFX is an extension for security certificate. It defines a file format that stores private keys (generated by your server at the time the CSR was generated) and public key certificate (your SSL Certificate provided by the CA) in a single encrypted file.


This document is applicable only for Version 9.4 and for versions less than 9.4, refer the below link,

 

To install a certificate with the extension .PFX,

  1. Stop ManageEngine ServiceDesk Plus - MSP service.

  2. Copy the .pfx file to the location C:\ManageEngine\ServiceDeskPlus-MSP\conf (where C: is the drive in which ServiceDeskPlus - MSP is installed)

  3. Change the web server port to 443 to run ServiceDesk Plus - MSP on secure mode. To change the web server port, open the command prompt and go to [ServiceDesk Plus - MSP Home]\bin. Enter the command as given below,

    [ServiceDesk Plus - MSP Home]\bin> changewebserverport.bat 443 https

  1. Go to the location [ServiceDesk Plus - MSP Home]\conf and open the file 'server.xml'  in a word pad.

  2. Locate the below entries in the file.

<!-- SSL/TLS Connector configuration using the admin devl guide keystore
      <Connector port="8443" address="${jboss.bind.address}"
           maxThreads="100" minSpareThreads="5" maxSpareThreads="15"
           scheme="https" secure="true" clientAuth="false"
           keystoreFile="${jboss.server.home.dir}/conf/sdp.keystore"
           keystorePass="sdpsecured" sslProtocol = "TLS" />

  1. Please replace the file name sdp.keystore with the pfx file name (name.pfx) and enter the keystoreType="pkcs12" after the file name. Also replace the 'sdpsecured' with the password for the .pfx file.

  2. The entries should look like this,

<!-- SSL/TLS Connector configuration using the admin devl guide keystore
      <Connector port="8443" address="${jboss.bind.address}"
             maxThreads="100" minSpareThreads="5" maxSpareThreads="15"
scheme="https" secure="true" clientAuth="false"
keystoreFile="${jboss.server.home.dir}/conf/name.pfxkeystoreType="pkcs12"  keystorePass="your password" sslProtocol = "TLS" />

  1. Restart ManageEngine ServiceDesk Plus - MSP service.

 


                  New to ADSelfService Plus?

                    • Related Articles

                    • How to install SSL certificate in AssetExplorer

                      SSL Installation Do you have a Wildcard or a Multi-domain certificate already running in your other servers and want to reinstall in on AssetExplorer server ?, then click here to find how to export SSL certificate using MMC.  Do you already have a ...
                    • How to install .pfx certificate manually in ServiceDesk Plus MSP version 10.5 and above

                      The below steps are applicable for version 10.5 and above. For .pfx certificate installation in version 9427 and below, follow the steps here. NOTE: Please take a server snapshot before following the steps given below A PKCS12 (.pfx) certificate ...
                    • How to Export SSL certificate using MMC?

                      When an SSL certificate is already installed on a Windows server, you may want to reinstall it on ServiceDesk Plus server. This may be required when you have a Wildcard or a Multi-domain certificate, and the subdomains or different domains are hosted ...
                    • How do I install SSL certificate for ServiceDeskPlus-MSP?

                      Introduction ServiceDesk Plus - MSP can run as a HTTPS service. But it requires a SSL (Secure Socket Layer) Certificate signed by a valid Certificate Authority (CA). By default, on a first-time start-up, it creates a self-signed certificate. This ...
                    • SSL Installation - .pfx file type

                      Instructions to setup SSL with a pfx file type, 1. Copy the .pfx file to the location C:\\ManageEngine\\SupportCenter\\server\\default\\conf 2. Change the Webserver port to 443 by executing changewebserverport.bat 443 https 3. Goto ...