guide installing go daddy certificates on

Guide Intel® Centrino® with vPro™ Technology

Intel® Core™2 Processor with vPro™ Technology

Installing Go Daddy Certificates on LANDesk 8.8

Version 1.2

February 17, 2009


2

Contents

Before You Begin ..............................................................................................................3 Overview .............................................................................................................................3 Create Customer Signing Request and corecakey.pem files..................................4 Purchase your Go Daddy certificate .............................................................................5

After receiving your certificate from Go Daddy.....................................................................................................................11 Import the certificate into Internet Explorer .......................................................... 12

Importing the .pfx file. .........................................................................................................................................................................12 First Export: Exporting the corecacert file ...............................................................................................................................18 Second Export: Exporting the trusted_cert_intermediate file .......................................................................................22 Third Export: Exporting the trusted_cert file..........................................................................................................................28


Before You Begin 1. Call LANDesk Support and install Service Pack 1 or greater.

2. To install the Go Daddy certificate, use Microsoft* Internet Explorer* running on either Microsoft Vista, Microsoft Windows* XP, or Microsoft Windows Server* 2003 with the latest service packs.

Overview This section lists the high-level steps you will perform when generating Go Daddy certificates to use with LANDesk 8.8.

1. Create Customer Certificate Signing Request file (CSR) that can be cut and pasted into Go Daddy’s web site for requesting a SSL certificate. This procedure also creates another file, corecakey.pem.

2. Import Go Daddy information (a .pfx file) into Microsoft Internet Explorer.

3. Perform three exports from Internet Explorer to create LANDesk files (corecacert.pem, trusted_cert_intermediate.pem, and trusted_cert.pem).

4. Place corecakey.pem (created by the DOS command amtprovmgr2.exe), trusted_cert.pem, trusted_cert_intermediate.pem and corecacert.pem file into C:\Program Files\LANDeskManagementSuite\amtprov\certStore\cert_1 on the LANDesk Core server.

Helpful Hints:

• Corcakey.pem file = the private key for the certificate you buy from the Certificate Authorities (CA’s)

• Trusted_cert.pem = the very root certificate from each CA. They generate intermediate ones for each category or geographic locations.

• Trusted_cert_intermediate.pem = the certificate that CA’s use to issue the certificate you buy. This is issued by the root certificate from each CA.

• Corecacert.pem = the actual certificate you buy from the CA.

• The certificate chain follows this path: Trusted_cert.pem > trusted_cert_intermediate.pem > corecacert.pem.


Create Customer Signing Request and corecakey.pem files We will use the AMTProvMgr2 executable to create a Customer Signing Request (CSR) and a file called corecakey.pem.

1. On the LANDesk core server, open a DOS window and change the directory to: C:\Program Files\LANDesk\ManagementSuite\amtprov

2. Type in “dir” and you should see a file AMTProvMgr2.exe.

3. Use the AMTProvMgr2.exe command according to this example:

NOTE: In the domainName field, input the Fully Qualified Domain Name (FQDN) of your core server, i.e., nameofmyserver.landesk.com, assuming that the core server is in either the parent domain or subdomain of your current DNS structure.

For example if your Company’s domain name is landesk.com, your server name is CoreServer, and we are located in the United States, you would type in the following:

C:\Program Files\LANDesk\ManagementSuite\amtprov>AMTProvMgr2.exe -domainName CoreServer.landesk.com –country US –state “Mystate” –city “MyCityName” –organization “My company name”. See example below.

4. This command generates a CSR file called certreq.csr and another file called corecakey.pem. We will use the corecakey.pem file later.

5. You can type “dir” to confirm the existence of these two files and then exit your DOS window.


Purchase your Go Daddy certificate 1. Open Windows Explorer and navigate to C:\Program Files\LANDesk\ManagementSuite\amtprov

and open the certreq.csr file with a text editor. You will need to paste the contents of this file into the Go Daddy web site when prompted.

2. Start the Go Daddy request process by opening your web browser and going to

www.GoDaddy.com.

http://www.godaddy.com/�


3. Select the SSL Certificate link


4. The SSL Certificates page displays.

5. Order a Deluxe SSL certificate (Single or Unlimited Domains) and then click Add.

• Single (your choice of 1, 2, or 3 years) for a single domain environment.

• Unlimited Subdomains. Wildcards are supported for Intel® AMT 2.6/3.2 and higher.

6. The Customize Your Order screen displays. No additional items are necessary on this screen. Click Continue.


7. The Secure Checkout screen displays. Your Deluxe Assurance SSL Certificate should be listed in the shopping cart.

8. Complete the rest of the screen and click Checkout Now.

9. The Billing Information screen displays. Include your valid company name.

IMPORTANT: You will be required to have someone from your company submit an approval letter for this certificate request on company letterhead (more detailed steps to follow).

10. After billing information is complete, login to your account to configure the certificate that you just purchased.

11. Select Manage SSL Certificates.

12. The Secure Certificates screen displays. You have one available credit.


13. Click Set up Certificate and then click Activate Account.

NOTE: You may need to login in to your account or create a new Certificate account. This is different than your Go Daddy account.

14. Select the Deluxe High-Assurance SSL Certificate and click Request Certificate.


15. Complete the next screen as follows:

a. In Step 1, select Corporate.

b. In Step 2, complete your personal information, including your company name.

c. In Step 3, paste the contents of your certreq.csr file that you generated from amtprovmgr2.exe, and then indicate the type of server used to produce the CSR from the drop down list.

d. Click Submit.


Next Steps

Your request will be routed to Go Daddy and you will receive an e-mail indicating the next steps.

1. Go Daddy will request two forms of identification (driver’s license and bank statement), as well as request that a company representative provide an approval letter on company letterhead, stating that you have the authority to request the SSL certificate for this server and domain.

2. After Go Daddy validates the required documentation, they will send you an e-mail stating that your SSL certificate is available.

3. You can now download your SSL certificate and apply it for use with LANDesk 8.8.

After receiving your certificate from Go Daddy If the certificate is:

• An attachment (Cert.cer), save the file to the hard drive and rename the file with a .pfx extension (example cert.pfx).

• In the body of the email, create a .pfx file (example: anynameyouwant.pfx) by copying (cut and pasting) the certificate text from the Go Daddy e-mail into a plain text editor such as Notepad, Wordpad, or Vi.

Use these guidelines:

o Include the header and footer as well as the surrounding dashes.

o Do not use Microsoft Word or other word processing programs that may add characters.

o Confirm that there are no extra lines or spaces in the file.

o Save the file with a *.pfx extension.


Import the certificate into Internet Explorer In this section, we will import the anythingyouwant.pfx file into Internet Explorer (on Microsoft Vista, Microsoft Windows XP, or Windows 2003 Server) and then export files to create our trusted_cert.pem, trusted_cert_intermediate.pem, and corecacert.pem files.

Importing the .pfx file. 1. Open Internet Explorer. From the menu bar, click Tools and then select Internet Options.

2. In the Internet Options dialog box, display the Content tab. Click Certificates.


3. In the Certificates dialog box, display the Trusted Publishers tab. You will need to scroll to the right to find this tab.

4. Click Import.


5. The Certificate Import wizard displays. Click Next.


6. The File to Import screen displays. Click Browse and select your *.pfx file, then click Open.

7. In the File to Import screen, click Next.

8. The Certificate Store screen displays. Accept the defaults, as shown below, and click Next.


9. The Completing the Certificate Import Wizard screen displays. Click Finish. A message displays

indicating that the import was successful.


10. Confirm that the Go Daddy certificate now displays in your Certificate dialog box.


First Export: Exporting the corecacert file 1. Open Internet Explorer. From the menu bar, select Tools > Internet Options > Content >

Certificates > Trusted Publishers.

2. Locate and select the certificate that you purchased from Go Daddy. Click the filename to highlight it and then click Export.

In our example below the file is provisionserver.vprodemo.com.


3. The Welcome to the Certificate Export Wizard displays. Click Next.

4. The Export File Format screen displays. Choose Base 64 Encoding X.509 (.CER) and click Next.


5. The File to Export screen displays. Click Browse and navigate to the subdirectory where you wish to save this file. Save the file as corecacert (do not use a file extension, it will automatically save with a .CER extension). When the Save as screen closes, click Next in the File to Export screen.

6. The Completing the Certificate Export Wizard screen displays. Click Finish. A message displays

indicating the export was successful.


7. Open Windows Explorer and navigate to the directory where you saved corecacert.cer. Rename it to corecacert.pem.


Second Export: Exporting the trusted_cert_intermediate file 1. Open Internet Explorer. From the menu bar, select Tools > Internet Options > Content >

Certificates > Trusted Publishers.

2. Locate the file named “SomeNameofyourCert” (or an equivalent filename). Double-click it.

In our example below, the file is named vprodemoddc.vprodemo.com. This is the certificate file that you are purchasing from Go Daddy.

3. A Certificate dialog displays. Display the Certification Path tab.


4. Double-click Go Daddy Secure Certification Authority.


5. The Certificate dialog displays. Display the Details tab and then click Copy to File…


6. The Welcome to the Certificate Export Wizard screen displays. Click Next.

7. The Export File Format screen displays. Choose Base 64 Encoding X.509 (.CER) and click Next.


8. The File to Export screen displays. Click Browse and navigate to the subdirectory where you wish to save this file. Save the file as trusted_cert_intermediate (do not use any extension) and then click Next in the File to Export screen once the Save as screen closes.


9. The Completing the Certificate Export Wizard window displays. Click Finish. A message displays indicating that the export was successful.

10. Open Windows Explorer and navigate to the directory where you saved trusted_cert_intermediate.cer file. Rename it to trusted_cert_intermediate.pem.


Third Export: Exporting the trusted_cert file 1. Open Internet Explorer. From the menu bar, select Tools > Internet Options > Content >

Certificates > Trusted Publishers. Double-click the file labeled “SomeNameofyourCert” (or an equivalent file name). In our example, the file is vprodemodc.vprodemo.com. This is the certificate that you are purchasing from Go Daddy.

2. The Certificate dialog displays. Display the Certification Path tab and double-click the file named “Go Daddy Class 3 Public Primary CA.”


3. The Certificate dialog displays. Display the Details tab and then click Copy to File…


4. The Certificate Export Wizard displays. Click Next.

5. The Export File Format screen appears. Choose Base 64 Encoding X.509 (.CER) and click Next.


6. The File to Export screen displays. Browse to the subdirectory where you wish to save this file, name it trusted_cert (do not use an extension), and click Save.


7. When the Save as screen closes, click Next in the File to Export screen.

8. The Completing the certificate Export Wizard screen displays. Click Finish. A message displays indicating the export was successful.


9. Open Windows Explorer and navigate to the directory where you saved trusted_cert.cer. Rename it to trusted_cert.pem

10. .

11. You have now created three files: corecacert.pem, trusted_cert_intermediate.pem, and trusted_cert.pem. Copy these files to C:\Program Files\LandeskManagementSuite\amtprov\certStore\cert_1 on the LANDesk Core server.

12. Also copy the C:\Program Files\LANDesk\ManagementSuite\amtprov>corecakey.pem file that you created earlier into the same directory C:\Program Files\LANDeskManagementSuite\amtprov\certStore\cert_1 on the LANDesk Core server.

The following screen shots are examples of the corecakey.pem, corecacert.pem, trusted_cert_intermediate.pem, and trusted_cert.pem.


*Other names and brands may be claimed as the property of

others.

Copyright © 2008 Intel Corporation. All rights reserved.

Intel®, the Intel logo, Intel. Leap ahead™, the Intel Leap ahead™

Logo, Centrino®, the Centrino® logo, Intel® Core™, vPro™, the

vPro™ logo, Intel SpeedStep™, Pentium®, and Celeron® are

registered trademarks of Intel Corporation in the United States

and other countries.

.

Intel® Active Management Technology requires the computer

system to have an Intel® AMT-enabled chipset, network

hardware and software, as well as connection with a power

source and a corporate network connection. Setup requires

configuration by the purchaser and may require scripting with

the management console or further integration into existing

security frameworks to enable certain functionality. It may

also require modifications of implementation of new business

processes. With regard to notebooks, Intel AMT may not be

available or certain capabilities may be limited over a host OS-

based VPN or when connecting wirelessly, on battery power,

sleeping, hibernating or powered off. For more information,

see http://www.intel.com/technology/manage/iamt/

INFORMATION IN THIS DOCUMENT IS PROVIDED IN

CONNECTION WITH INTEL® PRODUCTS. NO LICENSE, EXPRESS

OR IMPLIED, BY ESTOPPEL OR OTHERWISE, TO ANY

INTELLECTUAL PROPERTY RIGHTS IS GRANTED BY THIS

DOCUMENT. EXCEPT AS PROVIDED IN INTEL’S TERMS AND

CONDITIONS OF SALE FOR SUCH PRODUCTS, INTEL ASSUMES

NO LIABILITY WHATSOEVER, AND INTEL DISCLAIMS ANY

EXPRESS OR IMPLIED WARRANTY, RELATING TO SALE AND/OR

USE OF INTEL PRODUCTS INCLUDING LIABILITY OR

WARRANTIES RELATING TO FITNESS FOR A PARTICULAR

PURPOSE, MERCHANTABILITY, OR INFRINGEMENT OF ANY

PATENT, COPYRIGHT OR OTHER INTELLECTUAL PROPERTY

RIGHT. UNLESS OTHERWISE AGREED IN WRITING BY INTEL,

THE INTEL PRODUCTS ARE NOT DESIGNED NOR INTENDED

FOR ANY APPLICATION IN WHICH THE FAILURE OF THE INTEL

PRODUCT COULD CREATE A SITUATION WHERE PERSONAL

INJURY OR DEATH MAY OCCUR.

Intel Corporation may have patents or pending patent

applications, trademarks, copyrights, or other intellectual

property rights that relate to the presented subject matter.

The furnishing of documents and other materials and

information does not provide any license, express or implied,

by estoppel or otherwise, to any such patents, trademarks,

copyrights, or other intellectual property rights.

Intel may make changes to specifications and product

descriptions at any time, without notice.

Intel® Active Management Technology requires the platform to

have an Intel® AMT-enabled chipset, network hardware and

software, connection with a power source, and a network

connection.

http://www.intel.com/technology/manage/iamt/�

guide installing go daddy certificates on

Documents