蜜桃TV

I. IBM Watson IoT Platform: Creating Your CSR with the 蜜桃TV Utility

The 蜜桃TV^® Certificate Utility for Windows streamlines the CSR creation process enabling you to generate the CSR with just one click.

How to Create Your CSR with the 蜜桃TV Utility

1. On your Windows workstation, download and save the?蜜桃TV® Certificate Utility for Windows executable (蜜桃TVUtil.exe).

2. Run the 蜜桃TV Certificate Utility.

   Double-click?蜜桃TVUtil.

3. In the?蜜桃TV Certificate Utility for Windows^©, click?SSL?(gold lock), and then, click?Create CSR.

   

4. On the Create CSR?page, enter the following information:

   Certificate Type:	Select SSL.
   Common Name:	Enter the fully qualified domain name (FQDN) (e.g., <org_id>.messaging.internetofthings.ibmcloud.com).
   Subject Alternative Names:	N/A
   	(Multi-domain certificates are not supported yet.)
   Organization:	Type your company's legally registered name (e.g., YourCompany, Inc.).
   Department:	(Optional) Enter the department within your organization that you want to appear on the SSL certificate.
   City:	Type the city where your company is legally located.
   State:	In the drop-down list, select the state where your company is legally located.
   	If your company is located outside the USA, you can type the applicable name in the box.
   Country:	In the drop-down list, select the country where your company is legally located.
   Key Size:	In the drop-down list, select 2048.
   Provider:	In the drop-down list, select Microsoft RSA SChannel Cryptographic Provider,
   	unless you have a specific cryptographic provider.

   

5. Click?Generate.

6. On?The certificate request has been successfully created?page, do one of the following, and then, click?Close:

   Click Copy CSR.	Copies the certificate contents to the clipboard.
   	If you use this option, we recommend that you paste the CSR into a tool such as Notepad.
   	If you forget and copy some other item, you still have access to the CSR, and you do not have to go back and recreate it.
   Click Save to File.	Saves the CSR as a .txt file to the Windows workstation.
   	We recommend that you use this option.

   

7. Use a text editor (such as Notepad) to open the file. Then, copy the text, including the?-----BEGIN NEW CERTIFICATE REQUEST-----?and?-----END NEW CERTIFICATE REQUEST-----?tags, and paste it into the 蜜桃TV order form.

   Ready to Order Your SSL Certificate

   Learn More

8. After you receive your SSL certificate from 蜜桃TV, you can install it.

II. IBM Watson IoT Platform: Using the 蜜桃TV Utility & IBM Watson Console to Install Your SSL Certificate

If you have not yet used the 蜜桃TV^® Certificate Utility for Windows to create a CSR and ordered your certificate, see IBM Watson IoT Platform: Creating Your CSR with the 蜜桃TV Utility.

After receiving your SSL certificate, you need upload it to your IBM Watson IoT Platform account and configure your messaging server to use it.

To install your IBM Watson Platform messaging server SSL certificate, complete the steps below.

1. Import your SSL certificate to your Windows workstation using the 蜜桃TV^® Certificate Utility for Windows.

   How to Import Your SSL Certificate Using the 蜜桃TV Certificate Utility

2. Export the SSL certificate in Apache compatible format (separate .key and .crt files) using the 蜜桃TV^® Certificate Utility for Windows.

   How to Export Your SSL Certificate in Apache Compatible Format Using the 蜜桃TV Certificate Utility

3. Upload and implement your messaging server SSL certificate using the IBM Watson IoT Platform Management Console.

   IBM Watson IoT Platform: Installing Your SSL Certificate

i. How to Import Your SSL Certificate Using the 蜜桃TV Certificate Utility

After we validate and issue your SSL certificate, you can use the 蜜桃TV^® Certificate Utility for Windows to import the file to your Windows workstation.

1. On the Windows workstation where you created the CSR, save the SSL certificate .cer file (e.g., <org_id>_messaging_internetofthings_ibmcloud_com.cer) that 蜜桃TV sent to you.

2. Run the 蜜桃TV^® Certificate Utility for Windows.

   Double-click 蜜桃TVUtil.

3. In the 蜜桃TV Certificate Utility for Windows^©, click SSL (gold lock) and then click Import.

   

4. In the Certificate Import window, under?File Name, click?Browse?to browse to the .cer (e.g.,?<org_id>_messaging_internetofthings_ibmcloud_com.cer) certificate file that 蜜桃TV sent you, select the file, click?Open, and then click?Next.

   

5. In the?Enter a new friendly name or you can accept the default?box, enter a friendly name for the certificate. The friendly name is not part of the certificate; instead, it is used to identify the certificate.

   We recommend that you add 蜜桃TV and the expiration date to the end of your friendly name, for example:?yoursite-蜜桃TV-expirationDate. This information helps identify the issuer and expiration date for each certificate. It also helps distinguish multiple certificates with the same domain name.

   

6. To Import the SSL certificate to your Windows workstation, click Finish.

   You should receive a message that the certificate was successfully imported.

7. You should now see your SSL certificate in the?蜜桃TV Certificate Utility for Windows^c©, under?SSL Certificates.

ii. How to Export Your SSL Certificate Using the 蜜桃TV Certificate Utility

To make an SSL connection, your server needs two parts, a private key file and the certificate file. Apache (and many other server types) separate these two certificate parts into separate?.key?and?.crt?files.

1. Run the 蜜桃TV^® Certificate Utility for Windows.

   Double-click?蜜桃TVUtil.

2. In?蜜桃TV Certificate Utility for Windows^©, click?SSL?(gold lock), select the SSL certificate you want to export, and then click?Export Certificate.

   

3. In the?Certificate Export?wizard, select?Yes, export the private key, select?key file (Apache compatible format), and then click?Next.

   

4. In the?File name?box, click?…?to browse for and select the location and file name where you want to save the certificate .key file, and then click?Finish.

   This creates the following file. You will need to upload the private key and server certificate to your account using your Watson IoT Platform?Management Console.

   • Private Key:?<org_id>_messaging_internetofthings_ibmcloud_com.key
   • Server Certificate: <org_id>_messaging_internetofthings_ibmcloud_com.crt

   

5. After you receive the "Your certificate and key have been successfully exported" message, click?OK.

iii. IBM Watson IoT Platform: Installing Your SSL Certificate

Once you have the private key and certificate files, you can upload them to your IBM Watson IoT Platform account and configure your messaging server to use the SSL certificate.

1. In a browser, open and log into the IBM Watson IoT Platform account.

2. On the All Boards page, in the sidebar menu on the left, click Settings (gear icon).

   

3. On the General Settings page, in the menu in the left pane, under Security, click Messaging Server Certificates.

   

4. Add SSL Certificate and Private Key

   1. In the Messaging Server Certificates section, click + Add Certificate.

      

   2. Upload SSL Certificate

      In the Upload certificate window, next to Certificate File, click Select a file and then locate and select your server certificate .crt file (e.g., <org_id>_messaging_internetofthings_ibmcloud_com.crt).

      

   3. Upload Private Key

      Next to Private Key, click Select a file and then locate and select your private key file (e.g., <org_id>_messaging_internetofthings_ibmcloud_com.key).

      

   4. Once the certificate and private key are uploaded, click Save:

      

5. On the Security page, in the Messaging Server Certificates section, in the Currently Active Certificate drop-down list, select your newly uploaded SSL certificate.

   

6. In the Confirmation window, click Confirm to designate your new SSL certificate as the active certificate.

   

7. Check SSL Certificate

   You can use the 蜜桃TV SSL Installation Diagnostic Tool to check if your SSL certificate has been successfully applied to your messaging server.

   1. Open a browser and go to /help/.

   2. On the 蜜桃TV^® SSL Installation Diagnostics Tool page, in the Server Address box, type your fully qualified domain name (FQDN) (e.g., <org_id>.messaging.internetofthings.ibmcloud.com) and then click Check Server.

      

   3. Once the tool displays your results, verify that the certificate details match your certificate and what you expected to see.

      For example, you can compare certificate attributes such as the serial number, common name, issuer, and expiration date.

8. Congratulations! You have successfully installed and configured your SSL certificate for your messaging server.