Imperva Cyber Community

communities_1.jpg
 View Only

  • 1.  Install CA signed certificate on Gateway

    Posted 12-12-2022 13:04
    Kindly share process to install CA signed certificate on Gateway
    #DatabaseActivityMonitoring

    ------------------------------
    Urvin Shah
    Senior Cybersecurity Consultant
    M.Tech Solutions (India) PRIVATE LIMITED
    Mumbai
    ------------------------------


  • 2.  RE: Install CA signed certificate on Gateway

    Posted 12-13-2022 04:00
    Hi,

    1.Replace the following files：
    /opt/SecureSphere/etc/key.pem
    /opt/SecureSphere/etc/gw_self_signed_cert.crt
    2.impctl restart
    Done.

    ------------------------------
    mandie lin
    Technical Support Engineer
    CipherTech Co., Ltd
    Taipei
    ------------------------------

    Original Message


  • 3.  RE: Install CA signed certificate on Gateway

    Posted 12-13-2022 07:27
    Received below steps from support

    Step-by-step guide

    Procedure if you are using public key for generating CA Signed cert.

    1. Make sure that the GW is already registered.
    2. Generate a new public/private key pair ( Make sure that the key you're using is 2048 in size) and get the public key signed by the CA.                                                   https://docs.imperva.com/howto/e9edf135
    3. Stop the GW (if running). Make sure that the gateway is still registered.
    4. Take a backup of the file key.pem and replace the private-key file located in '/opt/SecureSphere/etc' (by default it's called- 'key.pem') with the new private key file.
      Note: The name of the new key file should be changed to default name i.e, key.pem
    5. Take a backup of gw_self_signed_cert.crt and replace the existing self-sign certificate located at- /opt/SecureSphere/etc/gw_self_signed_cert.crt, with the one signed by the 3rd party CA.
      Note: The name of new CA signed cert should be changed to default name: gw_self_signed_cert.crt
    6. On 'bootstrap.xml' edit the 'ssl/private-key-passphrase': <private-key-passphrase disable="false" use-manual-passphrase="false" manual-passphrase=""/>
      'disable'- set to 'true' in case your private key file is not encrypted. Leave it as-is if it's not encrypted.
      'use-manual-passphrase'- set to true if 'disable' is false. set to false if 'disable' is true.
      'manual-passphrase'- the passphrase (just if you decided to use one…).
    7. Start the GW

    We can quickly verify if it is there by accessing Gateway GUI and check the cert.



    ------------------------------
    Urvin Shah
    Senior Cybersecurity Consultant
    M.Tech Solutions (India) PRIVATE LIMITED
    Mumbai
    ------------------------------

    Original Message


  • 4.  RE: Install CA signed certificate on Gateway

    Posted 12-14-2022 08:55
    Hi Urvin,

    Gateway does not have web GUI access.

    ------------------------------
    Syed Noor Fazal
    Product Support Engineer
    ------------------------------

    Original Message