Renewing your SSL Certificate

Renewing your Ondexx SSL Certificate is a quick and simple task.

We can typically have the new certificate installed within 24 hours of receiving it.

Deploying the new certificate will require no downtime nor will it cause any loss of session, or loss of service.

Requirements

• The certificate must be issued & signed by a Certificate Authority (CA); Ondexx does not support self-signed certificates.
• The certificate must be an SSL/TLS X.509 version 3 certificate
• Only the following cryptographic algorithms and key sizes are supported:
  • 2048-bit RSA (RSA_2048)
  • 4096-bit RSA (RSA_4096)
  • Elliptic Prime Curve 256 bit (EC_prime256v1)
  • Elliptic Prime Curve 384 bit (EC_secp384r1)
  • Elliptic Prime Curve 521 bit (EC_secp521r1)
• All certificates must be in PEM–encoded format (i.e. Base64)
• Each certificate must be provided as an individual file
• You must provide the full certificate chain. This means that you must supply the root CA certificate and the intermediate certificate along with your newly generated SSL certificate.

Steps

1. Send an email to the Help Desk at support@ondexx.com and request a Certificate Signing request (CSR) for your site. Please include your values for the standard fields:
   • Common Name – The hostname that will use the certificate (a fully-qualified domain name like ondex.redwolfonline.com, or demo.ondexx.com).
   • Organization – The legal name of your company or organization.
   • Organization Unit – The departmental or division name for your group.
   • City/Locality – The city where your company is located.
   • State/Province – The state where your company is located.
   • Country/Region – Please use the two-character abbreviation for your country.
2. Red Wolf will reply back with the CSR.
3. Once the certificate is issued, please reply to the Help Desk email thread, and either:
   • Attach the certificate – including the full certificate chain – in PEM format; or,
   • Provide a link to download the files from your issuing Certificate Authority (CA).
4. Red Wolf will install the new certificate within 24 hours of receiving it.