SSL Cert Installation for caba.mmm.com

Every 2 years the certificate on the FM server will need to be updated

3m IT will need to download  and send you a copy of the cert and the corresponding password to you.

You will receive one file, (it should be in .pem format) via Venafi ( 3M's tool for managing SSL) This file will contain data for the 3 different files you need to create.

This will be something like caba.mmm.com.pem

Use this file to create the 3 files that filemaker requires, create 3 copies of the caba.mmm.com.pem file and name them  as follows (these are all basically just text files)

cert.pem

privkey.pem

intermediate.crt

Using a text editor (NOT Microsof word) edit each file

 

Edit cert.pem

remove the last section ( RSA key info)

Save

The cert.pem will contain the actually cert details as well as the intermediate cert info ( and yes the intermediate cert info will ALSO be in it's own file)

The First block will be the actual certificate into, the next 3 blocks will be the intermediate cert info

 

Edit privkey.pem

Remove everything BUT the last section ( RSA key info)

Save

 

Edit intermediate.crt

Remove the first"cert" portion and  the last section ( RSA key info)

Save

 

Upload/Download Files to/from AWS S3 CABA "Bucket"

Use your existing account on AWS (S3 Service) to upload the files from your local machine to the CABA Server.

The Remote in using Microsoft Remote desktop into the  CABA Server, login to the AWS S3  and download the files.

NOTE: If you do not know how to use/access  Microsoft Remote desktop or the AWS S3 Services then you should not be doing this SSL Certificate installation. Please close this document and contact someone who knows what they are doing. :-)

 

Remove existing Certificate

Using terminal/command line remove the existing certificate ) otherwise yo will get an error when trying to import the  new one.

Use the following command ( you will need the administrator name and password)

fmsadmin certificate delete

Shut down the FM server software

Open the Filemake Server Admin Console (127.0.0.1:16001)

(Should be book marked)

Make Sure there are no users connected prior to proceeding!!

Click Configuration, then general, then Stop Database Server

Restart the Filemaker Server Service on the server

Open Server Manager

Select Local server, the scroll down to Services and search for Filemaker

Right click on the Filemaker Server Service and select Restart Servcies

After the service has been restarted you can exit the Server Manager

Re-install the certificate files

Re-enter the filemaker admin console

Select the files for import: ( the files should be in your downloads folder from the previous step)

Signed Certificate file (cert.pem)

Private key File (privkey.pem)

Intermediate Certificate File (Intermediate.crt)

Enter provided password

Click Import

Open the Database files (database tab)

Done !