Intel NetStructure 7110 e-Commerce Accelerator Certificate Installation
You will be receiving the following four files from comodo:Root AddTrustExternalCARoot.crt
Intermediate CA UTNAddTrustServerCA.crt
Intermediate CA PositiveSSLCA.crt
domain/site certificate yourdomainname.crt
or You can download the Positive ssl Root and Intermediate files from here.When you receive the certificate, unzip it and import it into the 7110. Use the import cert command, with the KeyID. As with the import key, choose an import protocol for importing the key. Use p for paste. After the paste is finished, add three periods to display the command line.
You must import both the site certificate (domain.crt) and the intermediate certs (UTNAddTrustServerCA.crt first then PositiveSSLCA.crt ) certificate.All three certificates must be chained together in a single file. Use the import cert command to import the chained certificates. Paste the server's site certificate first,followed by the UTNAddTrustServerCA.crt then PositiveSSLCA.crtintermediate certificates. Follow the intermediate certificates by typing three periods on a new line
Use the import cert command to import the chained certificates. Paste the server's site certificatefirst, followed by the intermediate certificate. Follow the intermediate CA certificate by typing three periods on a new line.
Example:
Intel 7110>import cert webserver
keyid is webserver;
Import protocol:paste, xmodem, uudecode
[paste]: <Enter>
Type or paste in date, end with ... alone on line
-----BEGIN CERTIFICATE-----
MIIEhjCCA26gAwIBAgIQUkIGSk83/kNpSHqWZ/9dJzANBgkqhkiG9w0BAQUFADBv
…………..moretext…………
vm9nu/9iVzmdDE2yKmE9HZzvmncgoC/uGnKdsJ2/eBMnBwpgEZP1Dy7J72skg/6b
kLRLaIHQwvrgPw==
-----ENDCERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIEyDCCBDGgAwIBAgIEAgACmzANBgkqhkiG9w0BAQUFADBFMQswCQYDVQQGEwJV
…………..moretext…………
zs1x+3QCB9xfFScIUwd21LkG6cJ3UB7KybDCRoGAAK1EqlzWINlVMr5WlvHqvaDj
vA2AOurM+5pX7XilNj1W6tHndMo0w8+xUengDA==
-----ENDCERTIFICATE-----
-----BEGINCERTIFICATE-----
MIIEMTCCA5qgAwIBAgIQI2yXHivGDQv5dGDe8QjDwzANBgkq
…………..moretext…………
m8hDjswMKNXRjM1GUOMxlmaSESQeSltLZl5lVR5fN5qu
-----ENDCERTIFICATE-----
<Enter>
...<Enter>
Import Successful!
Intel 7110>
NOTE:There must be no whitespace before, between, or after certificates, and the "Begin..."headers and "End..." trailers must all be included.
Create mapping for Server 1.Use the create map command to specify the server IP address, ports,and keyID.
Intel7110> create map
Server IP (or 0.0.0.0): 10.1.1.30
SSL (network) port [443]:<Enter>
Clear text (server) port [80]: <Enter>
KeyIDto use for mapping: webserver
Save the configuration when the server has been mapped.
Intel7110> config save
Saving configuration to flash...
Configuration saved to flash
Intel 7110>