SSL certificate in PKCS#7 (.p7b) format cannot be installed completely by Symantec Messaging Gateway (SMG).
Environment
Symantec Messaging Gateway - Versions: 10.7.X, 10.8.X and 10.9.X
Cause
The PKCS#7 certificate is not compatible with SMG, and the SMG cannot convert it on its own.
Certificates must be in x509/PEM format in order to be installed into the Messaging Gateway.
Resolution
Notice: These instructions are provided as a service to our customers. Broadcom Support will not provide assistance to convert certificate formats. For more assistance, please contact your certificate authority.
Convert the PKCS7 certificate to x509/.pem file and import:
Install OpenSSL on the workstation, if not already installed.
Copy the .p7b file into the same directory as the OpenSSL executable
Run the command openssl pkcs7 -print_certs -in certificate.p7b -out certificate.pem, with certificate.p7b replaced by the name of the existing cert, and your name for the exported cert replacing certificate.pem (ex. converted_smg_cert.pem).
Take the new certificate.pem file and import into the Control Center of the SMG.
For more information, refer to the "working with certificates" chapter in the SMG Administration Guide.