UVMS SSL Configuration

A server's SSL configuration is performed with the help of the unissl Command server command. The following steps are necessary to configure a server in SSL:

1. Create the keystore

Execute the command:

unissl GENSTORE

2. Generate a public key pair/private key on the server

Execute the command:

unissl GENKEY

To save the public key pair/private key in the keystore protected with a password.

3. Generate a Certificate Signing Request (CSR) on the server.

Execute the command:

unissl GENCSR

To generate the file (in the PKCS#10 format) containing the request.

4. Send the request (CSR) to the certification authority.

Send the file to the certification authority.

5. Receive the server certificate signed by the certification authority.

Retrieve the signed certificate from the certification authority.

6. Install the certificates

Execute the command:

unissl IMPORT

To install the certificates in the server keystore

7. Stop UVMS

8. Activate SSL

Execute the command:

unissl SET

9. Restart UVMS to take these modifications into consideration.

When the SSL configuration is finished the server must be restarted.

Other unissl command options can enable/disable SSL, list or delete keys and certificates, change the password. Refer to section "unissl Command".