SSL Certificate Import in Ancor Server

Product Version: 6.5.0.0

Overview

This article explains the procedure to import an SSL certificate into an on-premise Ancor server. Importing an SSL certificate helps secure communication between the Ancor server and clients by enabling HTTPS with trusted encryption.

Type of Deployment

• On-Premise / In-House

Steps to Import SSL Certificate

1. Log in to Ancor CLI

Use the following command to access the Ancor CL:

$ ancor-cli
password:

Example:

$ ancor-cli
password: *******

2. Navigate to Service Management

Once logged in, switch to the Service Management mode:

$Ancor> servicemgmt

3. Install Server Certificate

Use the installservercert command with the absolute file path of the certificate file:

$Ancor:ServiceMgmt>installservercert [absolute file path of cert file]

Example:

Ancor:ServiceMgmt>installservercert /etc/apache2/ssl.crt/server.crt

4. Install Server Key

Next, install the corresponding private key file using the installserverkey command:

$Ancor:ServiceMgmt>installserverkey [absolute file path of key]

Example:

Ancor:ServiceMgmt>installserverkey /etc/apache2/ssl.key/server.key

5. Restart Ancor Service

Stop and start the Ancor service to apply the SSL certificate and key:

$Ancor:ServiceMgmt>stop
$Ancor:ServiceMgmt>start

6. Restart Apache2 (If Applicable)

If the private key is password-protected, manually restart the Apache2 service:

$service apache2 restart

7. Verify SSL Certificate Installation

After completing the steps above, verify the SSL certificate by accessing the Ancor URL in a web browser such as Google Chrome or Mozilla Firefox. Confirm that the certificate details match the newly installed certificate.

Important Notes

• Ensure that the SSL certificate and key files are valid, uncorrupted, and stored in the correct directories with proper file permissions.
• Always keep a backup of the original certificate and key files before replacement.
• In case of issues with HTTPS access after import, review the Apache2 error logs for troubleshooting.

Conclusion

By following these steps, administrators can successfully import an SSL certificate into an on-premise Ancor server. This process enhances the security of server-client communication by enabling HTTPS with trusted encryption. Ensuring proper configuration and verification will help maintain compliance and prevent connectivity issues.

For further assistance or troubleshooting, please contact SecPod Support.