Menu

Lumen help

Adding a new certificate

Media portal supports both standard certificates and Let's Encrypt certificate. For standard certificates, you can create a certificate signing request (CSR) to send to your certificate authority first, and then upload your certificate or you can just upload your certificate if you completed the CSR process outside of Media portal.

Starting with a CSR
Adding without a CSR

Adding a certificate by starting with a CSR

To add a certificate by starting with a CSR:

  1. From the main menu, select My Services > Caching. 
My Service - Caching
  1. From the lists, select the access group and SCID (service component ID) you want to work with. 
My Services - Caching (with SCID selected)
  1. Click Manage Certificates.

    Media portal lists the certificates associated with the SCID you selected. Certificates in active state are ready to use; certificates with other states may need your attention or may still being processed. Use the section below to learn more about certificate states, click the section below.
My Services - Caching (Manage Certificates)
  1. Click New Certificate.
my services caching manage certificates new certificate
  1. In the Certificate Name field, type the name for the new certificate.
  1. Click Generate CSR.
my services caching manage certificates generate csr from regenerate csr
  1. Fill in the information for the certificate:

    1. In the Common Name field, type the fully qualified domain name you want to secure.

    2. Fill in the details for your company so your certificate authority can verify your identity:

      1. In the Location field, type the city where your company is located (e.g, Denver).

      2. In the Country field, type the two-letter ISO code for country where your company is located (e.g., US).

      3. In the State field, type the state, province, or county where your company is located (e.g., Colorado)

      4. In the Organization field, type the legal name for your company. (Be sure to include and suffixes such as Ltd., Inc., or Corp.)

      5. In the Organizational Unit field, type the department name or organization unit using the certificate in your company (e.g., Finance, IT, HR).

    3. From the Key Algorithm list, select whether you want an RSA or EC (Elliptic Curve) certificate.

    4. From the Key Parameter list, select the number of characters for the certificate.

      1. If you selected RSA for the key algorithm, select the number of bits for the key: 1024, 2048, or 4096.

      2. If you selected EC for the key algorithm, select secp256r1, secp256k1, or secp384r1.

    5. If you need to specify additional host names for the certificate, click Add (in the Subject Alternate Names (SAN) field), then type the fully qualified domain name. (Repeat this step to add additional host names.)

    6. Click Submit.

      If the request is successful, Media portal gives you a CSR in .pem format for you to download or copy so you can provide the information to your certificate authority.
manage certificates new certificate generate csr with csr generated
  1. Click Close.
  1. Using the CSR you just downloaded, request a certificate from your certificate authority. Once you receive the certificate (or certificate bundle), repeat steps 1–4 to get back to the list of certificates for the SCID, then continue with step 9.
  1. On the row for the certificate where you just generated the CSR, click the Upload Cert link.

    Media portal displays details for the certificate you selected. Because you generated the CSR through Media portal, you don't need to provide the private key or password.
manage certificates new certificate upload certificate
  1. Upload or paste the certificate or certificate bundle by doing one of the following:

    • To upload the certificate as a file, click Upload File, browse to the file you want to upload, then click Open.

    • To upload the certificate bundle as a file, click Upload File, browse to the file you want to upload, then click Open.

    • To paste in the certificate from a file, copy the content, then paste it into the Certificate or field.

    • To paste in the certificate bundle from a file, copy the content, then paste it into the Certificate Bundle field.
  1. Click Submit.

Adding a certificate without a CSR

To add a certificate without a CSR:

  1. From the main menu, select My Services > Caching. 
My Service - Caching
  1. From the lists, select the access group and SCID (service component ID) you want to work with. 
My Services - Caching (with SCID selected)
  1. Click Manage Certificates.

    Media portal lists the certificates associated with the SCID you selected. Certificates in active state are ready to use; certificates with other states may need your attention or may still being processed. Use the section below to learn more about certificate states, click the section below.
My Services - Caching (Manage Certificates)
  1. Click New Certificate.
my services caching manage certificates new certificate
  1. In the Certificate Name field, type the name for the new certificate.
  1. Click Upload Certificate.
my services caching manage certificates new certificate upload certificate
  1. Upload or paste the certificate or certificate bundle by doing one of the following:

    • To upload the certificate as a file, click Upload File, browse to the file you want to upload, then click Open.

    • To upload the certificate bundle as a file, click Upload File, browse to the file you want to upload, then click Open.

    • To paste in the certificate from a file, copy the content, then paste it into the Certificate or field.

    • To paste in the certificate bundle from a file, copy the content, then paste it into the Certificate Bundle field.
  1. Upload a private key by doing one of the following:

    • To upload the private key as a file, click Upload File, browse to the file you want to upload, then click Open.

    • To paste in the private key from a file, copy the content, then paste it into the Private Key field.
  1. If the private key you added is encrypted, type the password for the private key in the Password field.
  1. Click Submit.