Messaging Gateway cannot install PKCS#7 SSL/TLS certificate

Products

• Messaging Gateway

Issue/Introduction

SSL certificate in PKCS#7 (.p7b) format cannot be installed completely by Symantec Messaging Gateway (SMG).

Environment

Symantec Messaging Gateway - Versions: 10.7.X, 10.8.X and 10.9.X

Cause

The PKCS#7 certificate is not compatible with SMG, and the SMG cannot convert it on its own.

Certificates must be in x509/PEM format in order to be installed into the Messaging Gateway.

Resolution

Notice: These instructions are provided as a service to our customers. Broadcom Support will not provide assistance to convert certificate formats. For more assistance, please contact your certificate authority.

 

Convert the PKCS7 certificate to x509/.pem file and import:

1. Install OpenSSL on the workstation, if not already installed.
2. Copy the .p7b file into the same directory as the OpenSSL executable
3. Run the command openssl pkcs7 -print_certs -in certificate.p7b -out certificate.pem, with certificate.p7b replaced by the name of the existing cert, and your name for the exported cert replacing certificate.pem (ex. converted_smg_cert.pem).
4. Take the new certificate.pem file and import into the Control Center of the SMG.

For more information, refer to the "working with certificates" chapter in the SMG Administration Guide.