Update CA signed certificate for Management console for Edge SWG (ProxySG) and ASG

Products

• ProxySG Software - SGOS

Issue/Introduction

Update CA signed certificate for Management console for Edge SWG (ProxySG) and ASG

Resolution

The first check existing certificate used for the Management console
--  configuration > services > management services.

Find the same certificate under SSL > Keyring > select certificate.

To new renew the certificate, need to generate a new keyring and certificate. We have options to generate self-signed or CA signed.

-- Go to SSL > Keyring. Create a new Keyring > Give recognizable name > select key size (2048 is good enough size)> Select "show keypair" > Click ok and Apply. This will generate a private key.

 

For CA-signed, We generate a CSR - Certificate signing request.

-- Edit newly create Keyring. 
-- Click on Create under Certificate signing request  > fill in information > Ok > Close > Apply and new CSR would generate.
-- Edit Keyring again, You will find the CSR.
-- Send the CSR to your corporate PKI system to get the Signed certificate. (We need base-64-encoded) 
-- Once you get a certificate.
-- Edit Keyring created earlier > select import under certificate > Import the certificate into the keyring.
You will need to open the certificate you get from Certificate authority > Copy all and paste the contents of the copied certificate, and click OK, then apply.
-- Click on view certificate 

Last steps to change certificate for Management console
--  configuration > services > management services.
--  Enable 'http console' and logout 
--  Login to Edge SWG (ProxySG) with http console using port number configured for http. (default port 8081) 
--  Configuration > services > management services , Edit HTTPS-Console > under keyring > select keyring we created newly.
--  Logout and login with https console,(Your browser may ask you trust the new certificate)
--  Disable the 'http console'.
---------------------------------

Additional Information

For self signed, 
-- Edit newly create Keyring. 
-- Click on Create under certificate > fill in information > Ok > Close > Apply and new self signed certificate would generate. 
-- Click on view certificate