Obtain An Externally Signed Ssl Certificate - Cobalt Digital Inc RaQ XTR User Manual

Chapter 4: Site Management
At a higher level, a server's certificate is "signed" by a trusted external authority
that the browser knows about, such as VeriSign. This is the authentication part of
the secure connection. The server information (country, state, city, organization)
is encoded into the certificate and certificate request. The external authority signs
your request and guarantees that your server information is legitimate.
For example, if a Web site sends a signed certificate saying that it comes from
Cobalt Networks in Mountain View, California, United States, the end user can
trust (due to the signed certificate from the external authority) that this Web site is
indeed run by this company located in this city.
A self-signed certificate is a certificate that has not been signed by an external
authority. A self-signed certificate simply ensures that an encrypted Web
connection is in place; it does NOT provide authentication to a user that the
server is who they say they are.
For more information on authentication, encryption and SSL, refer to Appendix I,
"Glossary".
Obtain an externally signed SSL certificate
Most users want to create an externally signed SSL certificate. For e-commerce,
an externally signed SSL certificate is required.
To do this, the RaQ XTR Administrator must perform the following steps. These
steps are explained in the following pages.
1. enable the SSL feature on a virtual site (see page 85)
2. generate a self-signed certificate (see page 86)
3. submit the information from the self-signed certificate to an external
certification authority (see page 89)
4. receive the response and information from the external certification authority
(see page 90)
5. in the SSL settings screen on the RaQ XTR, replace the self-signed
certificate with the information received from the externally signed
certificate (see page 90)
6. save the changes on the RaQ XTR
84 Cobalt RaQ XTR User Manual