If you have not yet created a Certificate Signing Request (CSR) and ordered your certificate on the Wisekey RA platform, see how to generate a OpenSSL CSR for Apache.

Apache Server SSL Certificate Installation

When you have received your Wisekey Apache ssl certificate you are ready to install it on your Apache server.

Copy the Certificate files to your server.

Download your Intermediate Wisekey crt file (wcidasca4.crt) on the following url location: http://public.wisekey.com/crt/, and your SSL Certificate (your_domain_name.crt) files.

1. Save the primary and intermediate certificates to a folder on the server with the private key.
   
   
2. Open the Apache configuration file in a text editor. Apache configuration files are usually found in /etc/httpd. The main configuration file is usually named httpd.conf. In most cases the <VirtualHost> blocks will be at the bottom of this httpd.conf file. Sometimes you will find the <VirtualHost> blocks in a separate file in a directory like /etc/httpd/vhosts.d/ or /etc/httpd/sites/ or in a file called ssl.conf.
   
   
3. If you need your site to be accessible through both secure (https) and non-secure (http) connections, you will need a virtual host for each type of connection. Make a copy of the existing non-secure virtual host and change the port from port 80 to 443.
   
   
4. Add the lines in bold below.
   
   <VirtualHost 192.168.0.1:443>
DocumentRoot /var/www/website
ServerName www.domain.com
SSLEngine on
SSLCertificateFile /etc/ssl/crt/primary.crt
SSLCertificateKeyFile /etc/ssl/crt/private.key
SSLCertificateChainFile /etc/ssl/crt/wcidasca4.crt
</VirtualHost> 
5. Change the names of the files and paths to match your certificate files:

SSLCertificateFile should be your primary certificate file for your domain name.

SSLCertificateKeyFile should be the key file generated when you created the CSR.

SSLCertificateChainFile should be the intermediate certificate file (if any) that was supplied by Wisekey SA

Save the changes and exit the text editor.

Restart your Apache web server using one of the following commands:

/usr/local/apache/bin/apachectl startssl
/usr/local/apache/bin/apachectl restart