I was setting up an SSL certificate for secure administration on a Barracuda Networks Load Balancer appliance. Normally Barracuda’s products are very easy to everything, but the Secure Administration certificate install was a bit of a head scratcher. The documentation on their support site seems to miss out a key step of the install, it does mention it on the web interface under the “Private (self-signed)” section but it is not very clear.<\/p>\n\n\n\n
So if you want your own certificate or just stick with the default certificate these instructions are not for you. But if you want to have a valid certificate from a third-party CA, you should follow these instructions:<\/p>\n\n\n\n
1. Logon to the web interface and then click on “Advanced” and then “Secure Administration”.<\/p>\n\n\n\n
2. Now you need to select “Private (self-signed)” (this is the first weird bit, surely you’d do it all under the trusted one?)<\/p>\n\n\n\n
3. Enter all your organisation information in the boxes. Paying special attention to the “Common Name” field. Once all the details are in click on “Save Changes”.<\/p>\n\n\n\n
4. Now click back on “Secure Administration” then select “Private (self-signed)” now at the bottom you should see two buttons for “Private Key” and “Private Root Certificate” click both and download the keys and keep them safe you’ll need them in a bit.<\/p>\n\n\n\n
5. Now click on “Trusted (Signed by a trusted CA)” from the dropdown box, click on “Edit Data” next to the CSR and fill out the details EXACTLY as you did before. <\/p>\n\n\n\n
6. Once done click the “Download” button next to the “Edit Data” button for the CSR. Then take the CSR file you got and send it to your CA to get a certificate issued. You need to ask for an Apache certificate in PEM format. More details about this can be found on the Barracuda support site.<\/p>\n\n\n\n
7. Once you have your certificate back from the CA, you need to import it.<\/p>\n\n\n\n
8. Logon to the web interface and then click on “Advanced” and then “Secure Administration”.<\/p>\n\n\n\n
9. Select the “Trusted (Signed by a trusted CA)” from the drop down, then upload the certificates:<\/p>\n\n\n\n
10. In my case I got a CRT file with the certificate in it from my CA, firstly click on the PEM certificate type radio button<\/strong>.<\/p>\n\n\n\n 11. Now for the certificate upload, click on “Browse<\/strong>” next to “Certificate Authority<\/strong>” box and pick the CRT<\/strong> file you go from your CA.<\/p>\n\n\n\n 12. Next click on “Browse<\/strong>” next to the “Private Key<\/strong>” box and pick the private key file you exported earlier.<\/p>\n\n\n\n 13. Click the “Upload Certificate Information<\/strong>” and you should have the certificate uploaded. You’ll need to log out possibly for the certificate to take effect. Now the next time you go to the secure administration page you can do so without the certificate errors.(note: if you get an error about your certificate not being valid, you may need to combine an intermediate certificate with the main certificate, more instructions for this can be found here: https:\/\/www.barracuda.com\/support\/knowledgebase\/50160000000GQCrAAO<\/a>)<\/p>\n","protected":false},"excerpt":{"rendered":" I was setting up an SSL certificate for secure administration on a Barracuda Networks Load Balancer appliance. Normally Barracuda’s products are very easy to everything, but the Secure Administration certificate install was a bit of a head scratcher. The documentation on their support site seems to miss out a key step of the install, it … Read more<\/a><\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-243","post","type-post","status-publish","format-standard","hentry","category-general"],"_links":{"self":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/243","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=243"}],"version-history":[{"count":1,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/243\/revisions"}],"predecessor-version":[{"id":1483,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/243\/revisions\/1483"}],"wp:attachment":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=243"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=243"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=243"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}