Troubleshooting and frequently asked questions

Procedure

1. Ensure the private key is not encrypted.
   1. Run the following script to decrypt and regenerate your certificate PEM file.

      #!/bin/bash
      
      # Check if exactly 2 parameters are provided
      if [ "$#" -ne 2 ]; then
          echo "Warning: You must provide exactly 2 parameters."
          echo "Usage: $0 <<original>>.pem <<decrypted>>.pem"
          exit 1
      fi
      
      # Parameters
      INPUT_PEM=$1
      OUTPUT_PEM=$2
      
      TEMP_CERT="temp_cert.pem"
      TEMP_KEY="temp_key_encrypted.pem"
      TEMP_KEY_DEC="temp_key_decrypted.pem"
      
      # extract cert
      openssl x509 -in "$INPUT_PEM" -out "$TEMP_CERT"
      
      # extract key
      openssl pkey -in "$INPUT_PEM" -out "$TEMP_KEY"
      
      # decrypt key
      openssl rsa -in "$TEMP_KEY" -out "$TEMP_KEY_DEC"
      
      # combine cert and decrypt key into new PEM
      cat "$TEMP_CERT" "$TEMP_KEY_DEC" > "$OUTPUT_PEM"
      # clear temp
      rm "$TEMP_CERT" "$TEMP_KEY" "$TEMP_KEY_DEC"
      
      echo "New pem generated.New filename = "$OUTPUT_PEM"

2. Confirm the output format is as follows:

   -----BEGIN CERTIFICATE-----
   (base64....)
   -----END CERTIFICATE-----
   -----BEGIN PRIVATE KEY-----
   (base64....)
   -----END PRIVATE KEY-----

3. In Service Gateway Management, click the Configure settings icon () next to the Service Gateway to which you wish to upload the certificate.
   The Service Gateway Settings window appears.
4. Click Import certificate.
5. Click Select file… and select your certificate file.
6. Click Import.
7. Click Save.
   The certificate is uploaded to the virtual appliance.