If your organization already has a valid SSL server certificate, you can use that certificate to replace the default SSL server certificate provided with View Connection Server.

To use an existing certificate, you also need the accompanying private key. The PKCS#12 file format, formerly called PFX file format, includes both the server certificate and the private key. The PKCS#12 file type can have a .pfx or .p12 extension.

SSL Certificate Formats and Configuration Path shows the configuration path to take when you start with a particular SSL certificate format.

SSL Certificate Formats and Configuration Path

If you have this SSL certificate format...

Take these steps

PKCS#12 signed by a root CA

If a PKCS#12 file contains a server certificate that is signed by a root CA and not an intermediate CA, you can use your existing PKCS#12 file when you configure your View Connection Server instance or security server to use the certificate. See Configure a View Connection Server Instance or Security Server to Use a New Certificate.

PKCS#12 signed by an intermediate CA

If a PKCS#12 file contains a server certificate that is signed by an intermediate CA rather than by a root CA, you must import the PKCS#12 keystore into a JKS keystore. See Convert a PKCS#12 File to JKS Format.

PKCS#12 - You are not sure which type of CA has signed your certificate.

If you are not sure whether your PKCS#12 file is signed by a root CA or intermediate CA, see Determine the Type of CA Signature on Your PKCS#12 Certificate.

PEM

If your organization provides you with an SSL certificate in PEM format, the certificate must be exported to PKCS#12 format. A certificate in PEM format might have an extension such as .crt or .pem. Consult with the provider of your certificate for advice on exporting the certificate to PKCS#12 format.

JKS

If your organization provides you with a Java keystore (JKS) file, you can use the existing JKS file when you configure your View Connection Server instance or security server to use the certificate. A JKS file might have an extension such as .jks. See Configure a View Connection Server Instance or Security Server to Use a New Certificate.