Menu

Lumen help

Standard Certificates (V2)

Important: This guide is for the V2 version of Media portal only. If you’re using V3, please refer to Configuration Management for V3, and if you are on V1.5, please note that this version has now been deprecated and we invite you to read our guide on migrating to V3.


Media portal supports both standard certificates and Let's Encrypt certificate. For standard certificates, you can create a certificate signing request (CSR) to send to your certificate authority first, and then upload your certificate or you can just upload your certificate if you completed the CSR process outside of Media portal.

 

To manage your certificates, you’ll need to navigate to the “Manage Certificates” menu of your Service Component ID (SCID). To do this, sign into Media Portal, select My Services > Caching from the tab across the screen, and from the lists, select the access group and SCID you’d like to work with. click on “Manage Certificates” to open the menu. Media portal lists the certificates associated with the SCID you selected, and the states of the certificates. Certificates in active state are ready to use; certificates with other states may need your attention or may still being processed. To view details for a certificate, on the row for the certificate you want to view details for, click the linked certificate name. Media Portal shows details for the certificate. If the certificate has pending changes, you can toggle between the active certificate (Current tab) and the changes (Pending tab).

Generating a Certificate Signing Request (CSR)

If you do not have a certificate, you can start by generating CSR. To do this , navigate to the “Manage Certificates” menu as described above. Media portal lists the certificates associated with the SCID you selected.

 

  • Click on “New Certificate” to begin creating a new certificate. Type in a “Certificate name” for the new certificate and click on “Generate CSR”. You will need to fill in the information for the certificate, as explained below.

     

  • In the “Common Name field”, type the fully qualified domain name you want to secure.

     

  • Fill in the details for your company so your certificate authority can verify your identity. Fill in the “Location”, “Country”, and “State” field for your company’s location. In the “Organization” field, input the legal name for your company (include suffixes such as Ltd., Inc., or Corp.). Type the department name or organizational unit using the certificate in your company (e.g., Finance, IT, HR) in the “Organizational Unit” field.

     

  • From the “Key Algorithm” list, select whether you want an RSA or EC (Elliptic Curve) certificate.

     

  • From the “Key Parameter” list, select the number of characters for the certificate. Depending on your key algorithm, this will differ.

     

    • If you selected RSA, select the number of bits for the key: 1024, 2048, or 4096.

       

    • If you selected EC, select secp256r1, secp256k1, or secp384r1.

       

  • If you need to specify additional host names for the certificate, click Add (in the Subject Alternate Names (SAN) field), then type the fully qualified domain name.

     

  • Repeat this step to add additional host names. Once all the details are filled, click “Submit”.

     

If the request is successful, Media portal gives you a CSR in .pem format for you to download or copy so you can provide the information to your certificate authority. Using the CSR you just downloaded, request a certificate from your certificate authority.

Adding a New Certificate

Once you have a certificate, irrespective of whether you did the CSR generation on Media Portal or elsewhere, you will need to add the certificate to Media Portal. To add a new certificate, navigate to the “Manage Certificates” menu.

 

  • If you did the CSR generation on media portal, a row with its certificate name will already exist. Click on “Upload Cert” to go to the “Upload Certificate” menu.

     

  • If you have done your CSR generation elsewhere, you’ll have to start by creating a new certificate by navigating to the “Manage Certificates” menu and clicking “New Certificate”. Type in a “Certificate name”, and then click on “Upload Certificate” button to go to the “Upload Certificate” menu.

     

  • Here, you can upload your certificate or certificate bundle, and your private key. You can do this by using the “Upload file” button and directly uploading a file from your local storage, or you can copy and paste the contents of your certificate, certificate bundle or private key directly into the respective field.

     

  • Lastly, If the private key you added is encrypted, type the password for the private key in the “Password” field. Once all the information is filled in, click on “Submit” to upload your certificate. You can view the state of the newly certificate on the “Manage Certificates” menu.

Replacing a Certificate

If you need to re-upload a certificate, certificate bundle, private key, or change a private key password, you can make the necessary changes rather than adding a new certificate. To replace a certificate, navigate to the “Manage Certificates”, and on the row for the certificate you wish to edit, click on “Replace cert”, and you can upload files for your certificate, certificate bundle, and private key, or you can copy and paste directly into the fields, just as described above for adding a new certificate.

Regenerating a Certificate Signing Request (CSR)

If you need to regenerate a CSR, go to “Manage Certificates” menu, and on the row for the certificate of your choice, click on the “Regenerate CSR”. Make any changes to the CSR information (as described above for generating a CSR) and submit. If the request is successful, Media portal gives you a CSR in .pem format for you to download or copy so you can provide the updated information to your certificate authority.