PureMessage for UNIX: How to Create an SSL Certificate for the Manager or End User Web Interface

To make an SSL connection more secure, it is recommended that you use a private certificate. You can generate certificates for the PureMessage Manager and the End User Web Interface (EUWI) with the pmx-cert command.

What to do

For the PureMessage Manager:

As the 'pmx' user:

1. Change to the manager directory
   
   $ cd /opt/pmx/etc/manager


2. Create the new certificate
   
   $ pmx-cert --bits 2048 --days 365 --dns pmx.example.com --email='admin@domain' --url='http://pmx.example.com'

Change the number of days, domain name, and email address to meet your needs. This will create a certificate in the form of the following file:
   
   /opt/pmx/etc/manager/pmx-cert.pem


3. On the Dashboard tab of the PureMessage manager, click Manage admin users, groups and permissions.
4. On the sidebar, under Manager Service, click SSL configuration.
5. In the Private Key File text box, enter /opt/pmx/etc/manager/pmx-cert.pem, or the custom location of the SSL certificate.

For the EUWI:

As the 'pmx' user:

1. Change to the manager directory
   
   $ cd /opt/pmx/etc/manager/httpd2


2. Move the existing pmx-cert.pem file

$ mv pmx-cert.pem pmx-cert.pem.backup


3. Create the new certificate

$ pmx-cert --bits 2048 --days 365 --dns pmx.example.com --email='admin@domain' --url='http://pmx.example.com'

Change the number of days, domain name, and email address to meet your needs. This will create a certificate in the form of the following file: /opt/pmx/etc/manager/httpd2/pmx-cert.pem.


4. Ensure that the SSLCertificateFile option in the /opt/pmx/etc/manager/ssl.conf file is set to /opt/pmx/etc/manager/httpd2/pmx-cert.pem.


5. Restart the EUWI service

$ pmx-httpd restart