Importing a 3rd Party Certificate

Steps to Import a 3rd Party Certificate:

1. Ensure that you have a digital certificate and private key in a format that Cerberus FTP Server understands. First, you will need to generate a new certificate (either by purchasing one from a public Certificate Authority, or can install a Certificate Authority in your domain). You need to have a public certificate and a private key along with the passphrase for the private key.
2. Open the Server Manager by selecting it from the main menu.
3. Select the Security tab and scroll down to the 'Server Key Pair' section.

    

   

4. If you have FIPS 140-2 on, click the slider to turn it 'OFF' and restart the Cerberus service. If you don't do this you will not be able to change the certificate. 
5. Under the Server Key Pair group, Click the folder icon at the end of the Certificate Key Path field.
6. A file open dialog will appear that will allow you to select the public certificate provided by your certificate authority. Certificate file extensions vary, but .crt and .pem are the most common.
7. Under the Server Key Pair group, Click the folder icon at the end of the Private Key Path field.
8. A file open dialog will appear that will allow you to select the server’s private key. If your public and private keys are in the same file then set this path to be the same as the Certificate file path.
   NOTE: Cerberus understands both DER and PEM encoded certificate formats.
9. Needs Key Password – Check this option if the digital certificate is encrypted with a password or passphrase.
10. Password – If the digital certificate is encrypted then this is the password or passphrase used to decrypt your digital certificate. The password is the same password you used to create the certificate request with your 3rd party certificate authority.
11. Click the Verify button to verify that Cerberus FTP Server can read the certificate and private key. If there are no errors then the certificate is valid and can be used by Cerberus.
12. Click Update to save your information. If no certificate was previously being used or the certificate file path changed then Cerberus will immediately configure itself to use the new certificate.
13. If you had FIPS 140-2 on before and would like to continue using it, click the slider to turn it back 'ON' and restart the Cerberus service.