QUESTION
How do I purchase an SSL Certificate
ANSWER
If you don’t currently have an SSL certificate the best option is to purchase one Trusted Certificate Authority (i.e. Verisign, Thawte, DigiCert, etc…). Trusted Certificate Authorities are organizations that can issue SSL Certificates that are automatically trusted by most popular web browsers (i.e. Internet Explorer, Chrome, Safari and Firefox). A Trusted Certificate Authority will review the Fully Qualified Domain Name (FQDN) in your Certificate Signing Request (CSR) and ensure you are the legitimate owner of that domain. For example, if your Kaseya web interface configured to use “myserver.acme.com”, the Trusted Certificate Authority will ensure that you own the domain “acme.com” and will issue you a certificate.
The high level overview of the process is as follows:
- You have DNS properly configured to resolve the server name to the MS IIS Web Server you are using to run the Kaseya Web Interface (i.e. “myserver.aceme.com”)
- In MS-IIS you will create a Certificate Signing Request (CSR)
- You will choose a Trusted Certificate Authority and choose to purchase a Web Sever SSL Certificate and as part of the purchase they will request that you provide them with the CSR you created in step 2 above.
- The Trusted Certificate Authority will validate you are the legitimate owner of the domain you are requesting the SSL Certificate for.
- The Trusted Certificate Authority will create and provide you with a Certificate and instructions for installing it in MS-IIS along with instructions for installing any Intermediate or Root Certificates into MS-IIS.
- Once the certificate and any Intermediate or Root Certificates are properly installed in MS-IIS.
- Lastly, you can take the certificate you just exported from MS-IIS and import it into Kaseya using the installer.
You can purchase a Web Server SSL Certificate and use their specific instructions for MS-IIS from popular Trusted Certificate Authorities