Novell LINUX ENTERPRISE DESKTOP 11 - SECURITY GUIDE 17-03-2009 Manual page 186

17.2.9 Importing Common Server
If you have exported a server certificate with YaST to your media on an isolated CA
management computer, you can import this certificate on a server as a common server
certificate. Do this during installation or at a later point with YaST.
NOTE
You need one of the PKCS12 formats to import your certificate successfully.
The general server certificate is stored in /etc/ssl/servercerts and can be used
there by any CA-supported service. When this certificate expires, it can easily be replaced
using the same mechanisms. To get things functioning with the replaced certificate,
restart the participating services.
TIP
If you select Import here, you can select the source in the file system. This op-
tion can also be used to import certificates from a transport medium, such as
a USB stick.
To import a common server certificate, do the following:
1 Start YaST and open Common Server Certificate under Security and Users
2 View the data for the current certificate in the description field after YaST has
3 Select Import and the certificate file.
4 Enter the password and click Next. The certificate is imported then displayed in
5 Close YaST with Finish.
174 Security Guide
Certificates
been started.
the description field.