4 Replies Latest reply on Jul 24, 2016 5:04 PM by bigtom

    FMS 15 SSL Certificate Install

    taylorsharpe

      I've done quite a few SSL certificate installs since FMS 13.  And until now, I have only been able to do it with command line.  FMS 14 supposedly had a certificate creation and import in the Admin Console, but it never worked for me. 

       

      So I was happy to see FMS 15 with new buttons for creating a CSR, with all the appropriate prompts, via a web page in the Admin Console.  So tonight I installed my first SSL certificate on a FMS 15 server (Mac OS X).  It was a SSL123 from Thawte (issued by ssls.com) that was a reissue of the certificate for the same server that I had upgraded from 14.  In case anyone wonders, the upgrade from FMS 14 to 15 did not persevere the 14 certificate for 15 (didn't think it would). 

       

      Anyway, the CSR I generated via FMS Admin Console uploaded fine to ssls.com and it confirmed the correct information compiled (URL), but when it tried to issue it, the web page said that there was a problem and we had to contact customer support.  Just to make sure this wasn't my problem, I did it a second time.  Both times I had to contact customer support to have the CRT file issued.  It just makes me wonder if there was some problem with how the FMS Admin Console created the CSR, but tech support was able to get it reissued. 

       

      Once I received the CRT file, the FMS Admin console did just fine importing it and then letting me know to restart the server for it to take effect. 

       

      Good job FileMaker on making the Certificate process one that can be done in the Admin Console.  The only question I have is if there was a problem with how FMS Admin Console generates the CSR or if it was a problem with ssls.com. 

       

      PS:  There is a good video released by RCC that covers the SSL certificates for 15.  FileMaker News-FileMaker Server 15 SSL Encryption Security Setup-FileMaker Pro 15 Video Course - YouTube   It is by Claus Lavendt, whose company is a brand new FBA Platinum company!  (good job Claus!)

        • 1. Re: FMS 15 SSL Certificate Install
          steveromig

          I've done quite a few SSL certificate installs since FMS 13. And until now, I have only been able to do it with command line. FMS 14 supposedly had a certificate creation and import in the Admin Console, but it never worked for me.

           

          So I was happy to see FMS 15 with new buttons for creating a CSR, with all the appropriate prompts, via a web page in the Admin Console. So tonight I installed my first SSL certificate on a FMS 15 server (Mac OS X). It was a SSL123 from Thawte (issued by ssls.com) that was a reissue of the certificate for the same server that I had upgraded from 14. In case anyone wonders, the upgrade from FMS 14 to 15 did not persevere the 14 certificate for 15 (didn't think it would).

           

          Anyway, the CSR I generated via FMS Admin Console uploaded fine to ssls.com and it confirmed the correct information compiled (URL), but when it tried to issue it, the web page said that there was a problem and we had to contact customer support. Just to make sure this wasn't my problem, I did it a second time. Both times I had to contact customer support to have the CRT file issued. It just makes me wonder if there was some problem with how the FMS Admin Console created the CSR, but tech support was able to get it reissued.

           

          Once I received the CRT file, the FMS Admin console did just fine importing it and then letting me know to restart the server for it to take effect.

           

          Good job FileMaker on making the Certificate process one that can be done in the Admin Console. The only question I have is if there was a problem with how FMS Admin Console generates the CSR or if it was a problem with ssls.com.

           

          PS: There is a good video released by RCC that covers the SSL certificates for 15. FileMaker News-FileMaker Server 15 SSL Encryption Security Setup-FileMaker Pro 15 Video Course - YouTube It is by Claus Lavendt, whose company is a brand new FBA Platinum company! (good job Claus!)

           

          I have passed this onto QA and they will look into.  In addition, QA probably would like to take a look at your CSR if you are willing.  I'll private message you an email address you can send it to if you are up for it.

           

          Did "their" support mention anything about why it didn't work?  Could there have been an unwanted space / character in there somehow?

           

          Steve Romig

          FileMaker, Inc.

          • 2. Re: FMS 15 SSL Certificate Install
            taylorsharpe

            We just did another FMS 15 SSL certificate using www.ssls.com and this time it went through without a hitch.  It seems that the first one was a problem with www.ssls.com and not with the FileMaker generated CSR at least from what I can see now. 

            • 3. Re: FMS 15 SSL Certificate Install
              dkb

              I just upgraded to Server 15 (fms_15.0.1.137) from 14 with a QuickSSL Premium certificate issued by www.ssls.com.

               

              In my case, the certificate DID persevere, so I did not have to get it reissued and reinstalled. I was sceptical but I have viewed the certificate via the browser (for a WebDirect solution) and it is correct.

               

              Is this possible or am I doing something wrong?

               

              - dkb

              • 4. Re: FMS 15 SSL Certificate Install
                bigtom

                I was not able to get the FMS15 Admin Console install to work on one instance and use CLI to get it done. A few people have made it known that they have had issues with the certificate install through the console. FM seems to be taking the reports seriously based some of the FMI employee posts here on those topics, but no update or info yet.