Knowledge Base

Adding SSL Certificates in SCM

Domains must be added and validated before enrolling for publicly trusted SSL certificates. For more information, see Understanding domains.

Using a Certificate Signing Request (CSR)

Generating a CSR

• Generation of CSR

• Generation of CSR with Auto-Installation

• Generation of CSR in Azure Key Vault

To add a certificate using a CSR:

1. Navigate to Certificates > SSL Certificates.

2. Click the Add icon.

3. Select Using a Certificate Signing Request (CSR) and click Next.

4. Complete the following fields on the Details tab:

   • Organization: Enter the organization the certificate belongs to.

   • Department: Enter the relevant department, if applicable.

   • Certificate Profile: Choose the certificate profile to be used.

   • Certificate Term: Select the validity period for the certificate, based on the available options for the chosen profile.

   • Comments: Optionally add any notes about the certificate.

   • External Requesters: Enter the email address of any external requester(s).

   Additional custom fields may be available depending on your configuration.

5. Click Next.

6. On the CSR tab, paste your CSR and click Next.

7. Complete the Domains tab. If prompted, enter any required Subject Alternative Names (SANs).

8. Click Next.

9. If prompted, review the EV Details tab and click Next.

   • EV details for the organization can be updated from the Organizations page.

10. Complete the Auto-Renewal tab:

    • (Optional) Enable auto-renewal.

    • Choose whether a new key pair should be created when renewing the certificate.

    • Specify the number of days before expiration for auto-renewal.

11. Click Next or OK.

12. If prompted, review and accept the EULAs by selecting I Agree for each, then click OK.

Importing an SSL Certificate

1. Navigate to Certificates > SSL Certificates.

2. Click the Import icon.

3. Select the organization the certificates will be assigned to.

4. (Optional) Select the department, if applicable.

5. Click Next.

6. Click the Upload SSL button.

7. Select your .zip file and click **Open`.

   Note: Certificates in the .zip file must be in .cer, .crt, or .pem format.