Setup guide

Admin > Settings > SSL, allows you to generate a CSR. On that page, when you fill in the
required information and click “Generate CSR,” your CSR text will display and a temporary
Private Key will be saved onto the SAFARI Montage hard drive. It will not overwrite any
previously uploaded Private Keys (yet). Paste the CSR text into the appropriate box on the SSL
vendor's checkout page, selecting “Apache - mod_ssl” as the certificate type. When your
certificate arrives, return to the Admin > Settings > SSL page and upload it. SAFARI Montage
will verify that the temporary Private Key corresponds to the Certificate you are now uploading.
At that point, provided the temporary Private Key and Certificate correspond, any previously
uploaded Private Key will be overwritten with the temporary Private Key. In other words, you
temporary Private Key is now your active Private Key.
Back Up Your Private Key and SSL Certificate
It is very important that you back up your Private Key and Certificate. To view your Certificate
and Private Key, click the small icons next to the Upload boxes on the Admin > Settings > SSL
page. A window will open with your encrypted Certificate or Private Key text in it. Copy and
paste that text into text file and save them in a secure location on your computer or network.
Certificates typically have a “CRT” file extension. Private Keys typically have a “KEY” or
“PEM” extension.
Certificate Trust in Various Browsers
In each web browser brand, there are ways to trust self-signed certificates so that the security
warnings no longer display.
Internet Explorer
To eliminate the warnings and the red Address Bar in Microsoft Internet Explorer when using a
self-signed certificate, you must add the certificate to the Windows “Trusted Root Certification
Authorities” store. To do this:
1. Click the following link to the self-signed SSL Certificate on this server.
2. When prompted, select “Open” button and agree to any warnings or prompts.
3. Click the “Install Certificate” button in the tabbed dialog box that appears. Internet Explorer
will inform you that you are about to install the certificate. Click “Next.”