Obtaining a Trusted SSL Certificate



This article will show you how to remove browser warnings about untrusted certificates when using LogonBox. You may see warnings like the images below when connecting to your server.



Follow the instructions in this article to install a trusted certificate in your server. You may be required to make a purchase using a third party certificate authority in order to complete this.


1. Update the self-signed certificate

Navigate to the Certificates page in the left menu where you should be able to see the list of certificates on the server, including the Default SSL Certificate.


If you already have a signed certificate and its corresponding private key in PEM or PFX format you should consult the article Uploading an existing Certificate and Private Key.

Click the Edit button next to Default SSL Certificate.


Enter a value in all fields. Pay particular attention to the CN field. This should be the hostname of your server and should include the FQDN of the host for which you are having the certificate signed.

Once complete, click Update.


2. Download CSR

Now that you have updated your certificate you can download the Certificate Signing Request by clicking on the gears icon for the Default SSL Certificate entry, then Download CSR.


You now have a CSR file that can be given to any Certification Authority for signing. You will normally be asked for the CSR file during the checkout of your certificate purchase.


3. Uploading your signed certificate

Once your Certificate Authority has completed all checks you will be issued with a number of files. One will be a .crt file that contains your new certificate, and the other should be a certificate bundle that contains the Certificate Authorities certificates.

From the same gears menu that you downloaded the CSR from, select the Upload Certificate option.


Select your new certificate files for upload in the dialog shown ensuring you upload both the Certificate file and the CA Bundle that contains your Certification Authorities certificates.

Click Upload Certificate to complete the operation.


4. Restart the Server

One the certificate has uploaded you should restart the server with the power icon at bottom right. Only after the server has been restarted will the new certificate be put into place. 

Note you will have to manually refresh the browser in order to have the browser make a new connection with the new certificate.