Installing SSL Certificates for Filemaker Server
Installing SSL Certificates for Filemaker Server Using GoDaddy or Similar Domain Registrar or Domain Hosting Company on OS X 10.9 Mavericks
You need to have CSR before you request SSL Certificate.
In order to generate your CSR file, you need to make sure that you have the privilege to write on /Library/FileMaker Server/CStore. To do that:
- Go to /Library/FileMaker Server/CStore.
- Right click on an empty field and click Get Info.
- On the Sharing & Permissions tab, look to see that the user you’re using has privilege to Read & Write. If this is not true:
- Check the lock icon on the bottom right. If it is locked, click the icon to unlock it.
- Enter the admin username and password.
- Click on privilege field next to your username, and choose Read & Write from the dropdown box.
- Click on the lock icon again to lock it.
Now we have to go to Terminal to generate CSR.
- Go to Terminal.
- type fmsadmin certificate create server_name (server_name can be whatever you want, but it has to match with the url of your site.
Sample command: fmsadmin certificate create company.docuwrx.com
If there are no error messages popping up in your terminal and you are just directed to next command line, everything is good.
For GoDaddy, we have to use the text inside CSR we just generated to request SSL Certificate instead of using the actual file.
- Go to /Library/FileMaker Server/CStore and right click on serverRequest.pem.
- Hover your mouse over Open With and select Other.
- On the Enable drop-down list, select change Recommended Applications to All Applications.
- Select TextEdit and click Open.
- Copy the whole text from TextEdit. We will use this later.
Next, go to GoDaddy or other domain hosting website that offers SSL Certificates. Although I have only listed what you need to do in GoDaddy, the steps for requesting SSL certificates should be similar even if you did not choose to use GoDaddy.
Requesting SSL Certificate from GoDaddy.com
- Log in to your account.
- Check if you have purchased a SSL certificate. If not, purchase one.
- Click on the My Account on the upper right corner.
- Click on Visit My Account button.
- Click on SSL Certificates
- If you’re renewing your SSL certificate, click options besides the name of the server that needs certificate renewal.
- If you’re requesting a new certificate for a server that currently does not have a SSL certificate, launch the newly bought certificate by clicking on the Launch button.
- On the window that opens that says Hosting Options on the top, select Third Party, Dedicated Server, or Virtual Dedicated Server since we are using Filemaker Server. If you are in other hosting company’s website and they have an option for Filemaker Server, select that option.
- On the text box that appears under Enter your CSR below, paste the text we got from serverRequest.pem, including everything.
- Signature algorithm should be SHA-1.
This is important. Most hosting companies will try to convince you that SHA-2 is better, but Filemaker Server operates on SHA-1. Choose SHA-1.
- Certificate issuing organization is Go Daddy or whatever company you’re going to use.
- Agree to terms and conditions and click Next.
- Confirm that the information was entered correctly. And finalize the process.
- Within 72 hours, you should get an email from Go Daddy confirming that the SSL certificate has been issued.
- Follow the url in the email.
- Click on the server that you requested SSL certificate for.
- Click on Download on the top.
- Select Other for server type on the window that pops up and download the zip file.
- Transfer the files inside the zip file to Desktop of the server you’re trying to install the SSL certificate (not a necessary step, but makes everything easier). There should be two files: one with complex-looking name that looks like hexadecimals (for example: 45a546f5acd.crt) and another one called gd_bundle.crt. We will not use gd_bundle.crt.
- Got to Terminal.
- Type fmsadmin certificate import path_to_file. File_name should be the name of the crt file you’re using (for example: 45a546f5acd.crt)
Sample command: fmsadmin certificate import /Users/docuwrx/Desktop/45a546f5acd.crt
- If there are no error messages displayed on the terminal window, everything is good.
- Restart your server.
And you’re done!