Install two CA certificates
You can upload two CA certificates (Root CA and an Intermediate CA) to the host computer and the device.
The following requirements must be met:
- Both CAs are in DER format with a .cer file extension.
- OpenSSL must be installed.
To upload two CA certificates:
- Convert both CAs from DER format to PEM format:
openssl x509 -inform der -in intermediate-ca.cer -out intermediate-ca.pem
openssl x509 -inform der -in root-ca.cer -out root-ca.pem
- Combine the CAs into a single file that is in PEM format, with .crt file extension:
copy intermediate-ca.pem + root-ca.pem certchain.crt
- On the host computer, launch the AnywhereUSB Configuration Utility interface.
- Select AnywhereUSB.
- Click Configure.
- In the Digital Certificate section, browse for: certchain.crt
- Click Update.
- On the device, open the AnywhereUSB web interface.
- Select Administration > X.509 Certificate/Key Management.
- Click Secure Sockets Layer (SSL)/Transport Layer Security (TLS) Certificates.
- Click Identity Certificates and Keys.
- Upload the end user certificate, which is the .pem file, signed by the Intermediate CA.
- If necessary, convert the CA from DER format to PEM format.
- Click Choose File and browse to the .pem file.
- Click Upload.
- Upload the private key associated with the end user certificate.
- Click Choose File and browse to the private key file.
- Click Upload.