Overview

SSL Certificate is a small data file that digitally binds a cryptographic key to an organization’s details. When installed on a web server, it activates the padlock and the https protocol and allows secure connections from a web server to a browser. Typically, SSL is used to secure credit card transactions, data transfer and logins.

Related documentation:

• SSL Certificates for Web in Sippy 2020 and below
• SSL Certificates for Web in Sippy 2021 and above

Method

1. Login to CA self-care page.

First you need to have account with some Certification Authority (CA). If you don't have such account then start by selecting CA that you want to use and open account with them. Some of the well-known CA companies are Verisign, GoDaddy, GeoTrust. More can be found with the web search.

2. Generate .csr and .key file via System Management - Tools -> CSR Generator

3. Use received files to generate certificate on CA self-care web page.

You should receive two files by e-mail shortly: .CSR (certificate signing request) and .KEY (private key). 

Save private key for later use and use received CSR file to request certificate from your certification authority (CA). 

The actual process depends on selected CA, but usually it involves uploading .CSR file and completing some kind of the address verification process. 

Once you complete this process the CA should provide you with the .CRT (certificate) file which is linked to the .key file that you saved before

4. Upload Key and CRT files on Sippy Web page

• For Sippy 2020 and below:

Open System Management - System Parameters, and upload the key and crt in Web Interface section. 

Note - Generate SSL Cert. checkbox should not be checked. If buttons are not displayed, save changes and reload the page.

• For Sippy 2021 and above:

Open System Management - System Parameters - SSL Certificates, click Add button.

Set in Common Name the DNS A-record generated above and choose Type = Uploaded

5. Set Web Address parameter to the DNS A-record

Open System Management - System Parameters - Web Interface, Security, select SSL Certificate created above and set Web Address that matches DNS A-record created before.

4. Wait for 5 minutes to allow the system to generate and install new SSL certificate. 

5. Check SSL Certificate

Web server will restart, login and check the Certificate in your browser.

How to renew an existing certificate

All work related to certificates renewal is done by switch operator, either by repeating the steps above, or by downloading new crt on CA authority self-care website and upload it along with same key.