Access Server: How to Issue or Renew Web SSL Certificates with GoDaddy

Scenario 1: Issuing a web SSL certificate for the first time

Follow these steps to issue an SSL certificate with GoDaddy:

1. Generate a CSR (certificate signing request) and private key. Refer to this guide for details.
2. Save the private key securely.
3. Provide the generated CSR to GoDaddy, your certificate authority (CA).
4. GoDaddy provides the following files (names may vary):
   • gd_bundle-g2-g1.crt = This is your CA bundle file.
   • a3508ca8cc5794m2.crt = This is your Signed SSL Certificate.
   • a3508ca8cc5794m2.pem = This is the intermediate certificate (not needed).
5. Upload the certificate to Access Server:
   1. Sign in to the Admin Web UI.
   2. Click Configuration > Web Server.
   3. Under User-provided Certificate, set Do you want to change the web server certificate? to Yes.
   4. Upload your files:
      • The private key from step 1.
      • The signed SSL certificate (a33508ca8cc5794m2.crt).
      • The CA bundle (gd_bundle-g2-g1.crt).
   5. Save settings and update the running server.

Scenario 2: Renewing a web SSL certificate

If you're renewing an SSL certificate, follow these steps:

1. Ensure you have the private key you generated with the initial setup.
2. Download the renewed certificate files from GoDaddy (names may vary):
   • gd_bundle-g2-g1.crt = This is your CA bundle file.
   • a3508ca8cc5794m2.crt = This is your Signed SSL Certificate.
   • a3508ca8cc5794m2.pem = This is the intermediate certificate (not needed).
3. Replace the existing certificate:
   1. Sign in to the Admin Web UI.
   2. Click Configuration > Web Server.
   3. Under Self-signed Certificate, set Do you want to change the web server certificate? to Yes.
      • The Admin Web UI will reload, and a security warning about the self-signed certificate will be displayed.
   4. Click yes to accept the warning and proceed.
   5. Click Configuration > Web Server.
   6. Under User-provided Certificate, set Do you want to change the web server certificate? to Yes.
   7. Upload the following files:
      • The private key.
      • The signed SSL certificate (a3508ca8cc5794m2.crt).
      • The CA bundle (gd_bundle-g2-g1.crt).
   8. Save settings and update the running server.

Important Notes

• Lost private key during renewal: If you lose your private key, follow the steps from Scenario 1 to regenerate it.
• Recovering a lost private key: You can recover your private key from the Access Server configuration database. Refer to this guide: Recovering SSL Web Certificates from the Config DB.

If you have additional questions, please submit a ticket.