Installing a third-party SSL Certificate for JSS Version 9.21

[coeadmin]

Hi all,

We have just setup a new JSS and are testing version 9.21.

I'm trying to figure out how to generate a CSR and am coming up short.

The new wizard is nice but wants a keystore file which I don't have.

In version 8 I remember having to create a keystore and generate a CSR via command line but those directions explicitly say that version 9 is different. https://jamfnation.jamfsoftware.com/article.html?id=115

Any ideas/thoughts are appreciated.

[jpfromdc98]

Banged my head up against many a wall to figure this out. Sorry I had to re-edit to to answer the question properly.

If you're generating one from scratch using the GUI, choose the action: Change the SSL certificate used for HTTPS and then select: Generate a certificate from the JSS's built-in CA

If you want to generate one from the command line, those instructions on the original thread you posted should help you.

If you're wanting to upload a .p12 file generated from elsewhere...

Are you running the JSS on a windows, linux or mac server? The commands would vary based on platform.

But in short, you need to convert your .pfx file to a .p12 file using keytool. Use these instructions found in this discussion.

https://jamfnation.jamfsoftware.com/discussion.html?id=4646

If you follow the instructions properly, you should be left with a .jks file. Once that's done, you can upload it using the GUI in 9.21. After that you'll need to stop/start tomcat once you're done. If you need any other details let me know.