Installing a SSL certificate on Juniper Secure Access (Juniper SA)

You received your certificate by email with one or several intermediate certificates and a root certificate. Keep this email within reach.

1- Retrieve your certificate(s) on your server

In the delivery email you'll find several links. Click on them and download the associated files:

• A: your server certificate
• B: certification chain

2- Installing the certificate

Go to Configuration > Certificates > Device Certificates
Select Pending Request and click Import. Then click Browse..., select the .cer file and click Import.
The certificate now appears in the list of available certificates.

3- Installing the certification chain

• Open the file containing the certification chain and separate the different certificates of the chain (one per file).
  A certificate begins with subject..., and ends with end -----END CERTIFICATE----- with all the dashes.
• Click on Intermediate CAs
• The intermediate authorities' page ten appears, click on Import CA Certificate...
• The import page appears, click Browser..., select the intermediate certificate file and click on Import Certificate
• Repeat the last 2 operations for each intermediate authority of the validation chain of the certificate.

4- Activating the certificate

• Go back to Configuration > Certificates > Device Certificates
• Click the certificate's name, the places where it is used then appear.
• Select the wanted ones and click on Save Changes. The certificate is immediately activated on the selected places.

N.B: If your interface has already been associated to a former certificate, you'll have to select the former certificate and un-link it. The interface will then be available for the new certificate to activate.