Subscribe:

Wednesday 6 July 2011

How to Secure your website using SSL Certificate?

Secure Socket Layer Certificate which is known as SSL Certificate provides a level of security and privacy for those wishing to conduct secure transactions over the Internet. Introduced to the Internet market by Netscape Communications, the SSL protocol protects HTTP transmissions over the Internet by adding a layer of encryption. This insures that your transactions are not subject to "sniffing" by a third party.


SSL provides visitors to your website with the confidence to communicate securely via an encrypted session. For companies wishing to conduct secure e-commerce, such as receiving credit card numbers or other sensitive information online, SSL is essential.


For SSL to work a valid signed SSL certificate is essential. Certificates are a standard way of binding a public key to a name. Public key encryption is a tactic that uses a pair of asymmetric keys for encryption and decryption. Each pair of keys consists of a public key and a private key. The public key is made public by distributing it widely. The private key is never distributed; it is always kept secret. Data that is encrypted with the public key can be decrypted only with the private key. Conversely, data encrypted with the private key can be decrypted only with the public key. This asymmetry makes public key cryptography so useful.

You can generate a self-signed certificate and use it for some time until the certificate "signed" by a trusted external authority VeriSign Certificate authority or GeoTrust Site Seals And it will be ready.

To enable SSL for your website with self-signed certificate:
1.                   Select Website Settings. Your website General Settings appear on the screen;
2.                   Click the Secure Website tab. The secure website summary appears on the screen;
3.                   Click the Generate a Request button. The certificate-request form appears on the screen;
4.                   Fill the form:
1.                   Select your country of residence from the Country drop-down menu. If needed, scroll the list;
2.                   Select your State from the State (US or Canada) drop-down menu;
3.                   Or type your State in the State (other countries) textbox;
4.                   Type your city or town of residence in the Locality textbox;
5.                   Type your company name in the Organization name textbox;
6.                   You can optionally type your company branch or affiliate name in theOrganization unit name textbox;
7.                   Type your website name in the Site name textbox;

6. Click the Submit button. The updated secure website summary appears on the screen: now both the certificate request and private key exists, but the secure website is not available because the SSL certificate is absent;

7. Click the Generate the SSL Certificate button. In a few seconds the screen reloads with the updated secure website summary: now the certificate is in place and the secure website is available;

8. Click the Enable SSL button.

To send a certificate request to an external certificate authority (if certificate request is already generated and the private key saved, as described in steps 1 -7 above):
1.                   Click on the Site tab. Website general settings appear on the screen;
2.                   Select Secure Website tab. The secure website summary appears on the screen;
3.                   Click the SSL certificate request details link. The content of certificate request appears in the popup window;
4.                   Copy the certificate request content in a file and send it to the certificate authority.

To import an SSL certificate signed by a certificate authority:
1.                   Select Website Settings. Your website general settings appear on the screen;
2.                   Click the Secure Website tab. The secure website summary appears on the screen;
3.                   Click the Install the SSL Certificate button. The form for SSL certificate importing appears on the screen;
4.                   Do one of the following:
1.                   Type the path to a file containing the SSL certificate in theCertificate file name textbox or click the Browse button to locate the file;
2.                   Or paste the certificate content in the Certificate content textbox;
5.                   Click the Submit button. The secure website summary appears on the screen;
6.                   Click the Enable SSL button.

To import both your backup SSL certificate and private key:
1.                   Select Website Settings. Your website general settings appear on the screen;
2.                   Click the Secure Website tab. Secure website summary appears on the screen;
3.                   Click the Install the SSL Files button. The form for both the SSL key and certificate importing appears on the screen;
4.                   Submit the key and certificate:
1.                   Type the path to a file containing the private key the Private key file name textbox (click the Browse button to locate the file) or paste the private key content in the Private key content textbox;
2.                   Type the path to a file containing the SSL certificate in theCertificate file name textbox (click the Browse button to locate the file) or paste the certificate content in the Certificate contenttextbox;
5.                   Click the Submit button. The secure website summary appears on the screen;

8. Click the Enable SSL button.

Secure website can be enabled only for IP-based website (i.e., a website that does not share an IP address with other websites). So if you have several websites on your server and only one IP address - any of these sites (but only one of them) can be SSL-capable. Go for GeoTrust True BusinessID Wildcard Certificate.

If you have any question, query or feedback than please send us atTheSSLStore.com

No comments:

Post a Comment