SSL - Server Certs - Assign to Components

Assign an SSL certificate to the MOVEitDMZ Web Site

To perform these procedures please have your SSL certificate(s) imported already.

1. Click Start > All Programs > Administrative Tools > Internet Information Services Manager (IIS Manager).
2. In the left pane, expand the Sites section, right-click your website (usually Moveitdmz) and select Edit Bindings.

   

3. Select the https port entry you wish to assign the cert to, usually 443, and then click Edit.

   

4. In the Edit Site Binding window, select the correct certificate from the drop-down box and then click OK. Your IIS certificate has been changed.

Hint: If you performed this procedure on your default IIS site because you were still using the MOVEit DMZ 90-day test certificate, move your new cert over to your moveitdmz IIS site. First, select the default IIS site, open Server Certificates, and then click Remove on the right. Next, select the moveitdmz IIS site, open Server Certificates, and then select Bindings on the right. Select the https port, click Edit, and then select the certificate you requested and installed from the default IIS site.

The certificate now needs to be assigned to the MOVEit DMZ FTP Server.

Assign an SSL certificate to the MOVEit DMZ FTP Server

Remember to assign certificates to the FTP server when upgrading SSL certificates. This can cause FTP clients to fail if certificates are not updated.

1. On the DMZ server, open the DMZ Config utility and navigate to the FTP Certs tab.

   

2. Click ... next to Default Certificate to open a dialog box containing the server certificates from the Personal cert store.
3. Double-click the certificate that you want to use for the Moveit DMZ FTP server.
4. Click Apply then click OK.
5. Restart the MOVEit DMZ FTP Server from the Status tab.
6. Click Start -> Programs -> Administrative Tools -> Internet Information Services Manager (IIS Manager). Select the web site you wish to work with and Right-Click then select Properties. Click on the Directory Security tab then click Server Certificate.... This will start the Web Server Certificate Wizard.
7. Select Assign an existing certificate and click Next.

   

8. Select the correct certificate and click Next.

   

9. Select port (almost always 443) to use click Next.

   

10. Verify the certificate summary and click Next.

    

11. The certificate has now been assigned to the Web site, click Finish.

    

Assign an SSL certificate to the MOVEit DMZ FTP Server

Remember to assign certificates to the FTP server when upgrading SSL certificates. This will cause FTP over SSL clients to fail if certificates are not updated.

1. Click Start -> Programs -> MOVEit DMZ -> MOVEit DMZ Config.

   

2. Select the FTP Certs tab and click the [...] box next to Default Certificate. This will open the Certificate Manager.
3. Click on My Personal under Current User or Local Machine (depending how the certificate was imported) and Double-Click the certificate that was used for MOVEit DMZ Web Site.

   

4. The Certificate selected should be selected and you can click Ok. The MOVEit DMZ FTP Server needs to be restarted for this to take effect.

   

5. To restart the MOVEit DMZ Service open a command prompt and type net stop moveitdmzftp. After the service has successfully stopped, type net start moveitdmzftp. The SSL certificate should now take effect in the MOVEit DMZ FTP server.