An Secure Sockets Layer (SSL) certificate is required when SSL is used to connect the How Do I Install an SSL Certificate for the Email Server?

Answer

1.Obtain the SSL certificate for the email server.
Export the SSL certificate from the email server.

NOTE:
The eSight does not support SSL V3 certificates.


2.Copy the SSL certificate to a temporary directory of the eSight server.
3.Install the SSL certificate to the specified directory.

NOTE:
•Before performing the operation, ensure that you have the read and write permissions of the eSight installation directory/etc/certificate directory.
•keytool is a Java runtime environment (JRE) command. Ensure that the command is executable.
•Windowsa.In the command line window, run the following commands:
keytool -import -file SSL certificate directory/SSL certificate name -keystore eSight installation directory/AppBase/etc/certificate/application/node/trustKeystore -storepass password of SSL certificate

NOTE:
◾For Upgrade from earlier versions to eSight V300R005C00, the directory for installing the SSL certificate of the email server is eSight installation directory/AppBase/etc/certificate/trustKeystore
◾For Fresh installation of eSight V300R005C00, the directory for installing the SSL certificate of the email server is eSight installation directory/AppBase/etc/certificate/application/node/trustKeystore

b.Check whether a prompt message is displayed, asking you whether to display the trust certificate.◾If the prompt is displayed, enter Y at the prompt.
◾If the prompt is not displayed, the JDK is not installed. Run the following command to install it:
cd /d eSight installation directory/AppBase/jre/bin

keytool -import -file SSL certificate directory/SSL certificate name -keystore eSight installation directory/AppBase/etc/certificate/application/node/trustKeystore -storepass password of SSL certificate

When a prompt is displayed, asking you whether to display the trust certificate, enter Y.



•Linuxa.In the command line window, run the following commands:
keytool -import -file SSL certificate directory/SSL certificate name -keystore eSight installation directory/AppBase/etc/certificate/application/node/trustKeystore -storepass password of SSL certificate

NOTE:
◾For Upgrade from earlier versions to eSight V300R005C00, the directory for installing the SSL certificate of the email server is eSight installation directory/AppBase/etc/certificate/trustKeystore
◾For Fresh installation of eSight V300R005C00, the directory for installing the SSL certificate of the email server is eSight installation directory/AppBase/etc/certificate/application/node/trustKeystore

b.Check whether a prompt message is displayed, asking you whether to display the trust certificate.◾If the prompt is displayed, enter Y at the prompt.
◾If the prompt is not displayed, the JDK is not installed. Run the following command to install it:
cd eSight installation directory/AppBase/jre/bin

./keytool -import -file SSL certificate directory/SSL certificate name -keystore eSight installation directory/AppBase/etc/certificate/application/node/trustKeystore -storepass password of SSL certificate

When a prompt is displayed, asking you whether to display the trust certificate, enter Y.


c.Run the following command to modify the certificate permission to ensure the certificate security:
chmod 600 eSight installation directory/AppBase/etc/certificate/application/node/trustKeystore




4.Restart the eSight.

This post was last edited by Skay at 2018-10-17 10:56.

There is a standard answer :

http://support.huawei.com/hedex/pages/EDOC1000184142AEH01028/04/EDOC1000184142AEH01028/04/resources/maintenance_manual/SemiXML(0016119902)/en-us_topic_0100731618.html?ft=0&fe=10&hib=11.5.7.20.1&id=EN-US_TOPIC_0100731618&text=How%20Do%20I%20Install%20an%20SSL%20Certificate%20for%20the%20Email%20Server&docid=EDOC1000184142

1.Obtain the SSL certificate for the email server.

Export the SSL certificate from the email server.

NOTE:

The eSight does not support SSL V3 certificates.


2.Copy the SSL certificate to a temporary directory of the eSight server.
3.Install the SSL certificate to the specified directory.

NOTE:
•Before performing the operation, ensure that you have the read and write permissions of the eSight installation directory/etc/certificate directory.
•keytool is a Java runtime environment (JRE) command. Ensure that the command is executable.
•Windowsa.In the command line window, run the following commands:
keytool -import -file SSL certificate directory/SSL certificate name -keystore eSight installation directory/AppBase/etc/certificate/application/node/trustKeystore -storepass password of SSL certificate

NOTE:
◾For Upgrade from earlier versions to eSight V300R005C00, the directory for installing the SSL certificate of the email server is eSight installation directory/AppBase/etc/certificate/trustKeystore
◾For Fresh installation of eSight V300R005C00, the directory for installing the SSL certificate of the email server is eSight installation directory/AppBase/etc/certificate/application/node/trustKeystore

b.Check whether a prompt message is displayed, asking you whether to display the trust certificate.◾If the prompt is displayed, enter Y at the prompt.
◾If the prompt is not displayed, the JDK is not installed. Run the following command to install it:
cd /d eSight installation directory/AppBase/jre/bin

keytool -import -file SSL certificate directory/SSL certificate name -keystore eSight installation directory/AppBase/etc/certificate/application/node/trustKeystore -storepass password of SSL certificate

When a prompt is displayed, asking you whether to display the trust certificate, enter Y.



•Linuxa.In the command line window, run the following commands:
keytool -import -file SSL certificate directory/SSL certificate name -keystore eSight installation directory/AppBase/etc/certificate/application/node/trustKeystore -storepass password of SSL certificate

NOTE:
◾For Upgrade from earlier versions to eSight V300R005C00, the directory for installing the SSL certificate of the email server is eSight installation directory/AppBase/etc/certificate/trustKeystore
◾For Fresh installation of eSight V300R005C00, the directory for installing the SSL certificate of the email server is eSight installation directory/AppBase/etc/certificate/application/node/trustKeystore

b.Check whether a prompt message is displayed, asking you whether to display the trust certificate.◾If the prompt is displayed, enter Y at the prompt.
◾If the prompt is not displayed, the JDK is not installed. Run the following command to install it:
cd eSight installation directory/AppBase/jre/bin

./keytool -import -file SSL certificate directory/SSL certificate name -keystore eSight installation directory/AppBase/etc/certificate/application/node/trustKeystore -storepass password of SSL certificate

When a prompt is displayed, asking you whether to display the trust certificate, enter Y.


c.Run the following command to modify the certificate permission to ensure the certificate security:
chmod 600 eSight installation directory/AppBase/etc/certificate/application/node/trustKeystore

4.Restart the eSight.