Obtain Private Key and Certificate Files Using OpenSSL or the DigiCert Windows Tool
Once you receive the certificate files back from DigiCert you will need to prepare them to import to the SSL VPN. Depending on which of the above process you used to create the CSR (OpenSSL, or using the DigiCert Utility) will determine that steps needed for preparing the files for importing.
OpenSSL Certificate file Preparation
For OpenSSL all you will have to do is copy the private key that was generated when you created your CSR (your_domain_com.key), and the certificate files from DigiCert to the Barracuda Device (they will need to be extracted from your_domain_com.zip first).
Import Certificate File with DigiCert Utility
If you used the DigiCert Utility you will need to install the certificate to the computer then export it into the Apache file format.
-
Run the DigiCert Utility and click Import.
Browse to your_domain_com.crt and hit Enter.
-
You will be prompted to add a friendly name. You can either enter one or just click Finish.
-
You should now see your SSL certificate for 'your.domain.com' listed in the SSL Certificates section.
Export Certificate File using DigiCert Certificate Utility
-
You will now need to select your certificate file and click Export.
-
Now select Yes Export the Private Key and Key file (Apache compatible format).
Then click through until the wizard is completed.
Importing the Certificate to the Barracuda Device
Now that you have your private key file (your_domain_com.key), and all of the certificate files in Apache format (your_domain_com.crt, and DigiCertCA.crt) created with a 2048 bit CSR you are now ready to upload the files to the Barracuda device.
-
Login to the Barracuda SSL VPN and go to the SSL Certificate section.
-
In the Trusted Certificate section upload the following files to the sections below then click 'Upload Certificate Information':
Signed Certificate: your_domain_com.crt
Certificate Chain Bundle: DigiCertCA.crt
Certificate Password: leave blank (this is only required for PFX files aka PKCS12 files).
Private Key: your_domain_com.key
-
Under SSL Certificate Configuration select your certificate from the drop-down menu. Then click Save Changes
-
Click the Synchronize button.
You should then see 2 green bars at the top showing:
Configuration Updated
Synchronization successful.
The Barracuda SSL VPN is Restarting now and should be back up serving out the new certificate two clients within a minute or two.
Remove the SSL Certificate from your Computer
-
Run the DigiCert Utility and right-click the certificate that you exported to the Barracuda device, and choose Delete Certificate.
-
When prompted to confirm if you're sure you want to delete the certificate click Yes.
After you have successfully imported the SSL Certificate to the Barracuda device, if you exported the SSL Certificate from your personal computer with the DigiCert Utility, as a security precaution it is recommended that you Delete the certificate from your computer following the instructions below: