Secure Global Desktop Administration Guide > Security > Obtaining and installing an X.509 certificate

Obtaining and installing an X.509 certificate

Problem

You want to obtain and install an X.509 certificate for use with the Sun Secure Global Desktop Security Pack.

Solution

Use the tarantella security certrequest command to generate a Certificate Signing Request (CSR) for the Secure Global Desktop host. Then send the CSR to a supported Certificate Authority, which will return a certificate for you to install for use with the Sun Secure Global Desktop Security Pack on that host.

Alternatives

Case study

Indigo Insurance, based in Massachusetts, USA, wants to obtain an X.509 certificate for a Secure Global Desktop server with a freshly installed Sun Secure Global Desktop Security Pack.

Solution

  1. On the Secure Global Desktop host, use tarantella security certrequest to generate a Certificate Signing Request (CSR):
    tarantella security certrequest \
      --country US \
      --state Massachusetts \
      --orgname "Indigo Insurance"  
  2. Send the CSR to a supported Certificate Authority.
  3. Copy the returned certificate to a temporary file (for example, /tmp/cert), then type the following command to install it:
    tarantella security certuse < /tmp/cert 

Next steps

Related topics