To install the Root and Intermediate CA certificates on Oracle Wallet Manager, perform following steps:
Note: Oracle Application 9i Server does not support intermediate certificates. Oracle advises to upgrade to 10g.
The SSL certificates are signed by an Intermediate CA using a two-tier hierarchy, which enhances the security of your SSL Certificate.
If the proper Intermediate CA is not installed on the server, your customers will see browser errors and may choose not to proceed further and close their browser.
Note: The Intermediate CA Certificate:
- Supplies the necessary chaining to a trusted root in an SSL connection.
- Must be installed on the server acting as a chain link between the browser root and server certificate.
- Does not control encryption step-up. This function is controlled by the server software.
Step 1. Download the Root and Intermediate CA Certificates
Note:Ensure that the appropriate Root and Intermediate CA certificates have been downloaded for you SSL product type.
To check which certificate has been purchased, follow the steps from this link: SO13499
- Download the Root CA certificate for your SSL product from this link: SO4785
- Download the Intermediate CA certificate from this link: INFO657
Select the appropriate Intermediate CA certificate for your SSL Certificate type.
Step 2. Import the Root and Intermediate CA Certificates
Use one of the following methods to install the Root and Intermediate CAs certificates:
Method 1: Copy / Paste
- Open Oracle Wallet Manager
- Select Operations > Import Trusted Certificate
- Import the Root CA certificate
- Select Paste the Certificate
- Click OK
- Paste the certificate into the text box
- Click OK > OK
- Repeat the steps to import the Intermediate CA certificate.
Method 2: Uploading a file
- From the menu bar, click Operations > Import Trusted Certificate
- The Import Certificate dialog box appears
- The CA certificate must be imported in the following order: Root CA then Intermediate CA
- Enter the path or folder name of the certificate location
- Select the name of the trusted certificate file you created
- Click OK
- A message at the bottom of the window confirms that the trusted certificate was successfully installed.
Note: Remember to save changes to the Wallet after importing the Trusted Root Certificate and before closing the Wallet.