Parallels Business Automation 5.5 Trustwave SSL Plug-in Configuration Guide Revision 1.2 (June 20, 2014) Copyright 1999-2014 Parallels IP Holdings GmbH and its affiliates. All rights reserved.
Parallels IP Holdings GmbH. Vordergasse 59 CH8200 Schaffhausen Switzerland Tel: + 41 526320 411 Fax: + 41 52672 2010 www.parallels.com Copyright 1999-2014 Parallels IP Holdings GmbH and its affiliates. All rights reserved. This product is protected by United States and international copyright laws. The product s underlying technology, patents, and trademarks are listed at http://www.parallels.com/trademarks Microsoft, Windows, Windows Server, Windows NT, Windows Vista, and MS-DOS are registered trademarks of Microsoft Corporation. Linux is a registered trademark of Linus Torvalds. Mac is a registered trademark of Apple, Inc. All other marks and names mentioned herein may be trademarks of their respective owners.
Contents Preface... 4 Documentation Conventions... 4 Typographical Conventions... 4 Feedback... 5 Abbreviations and Terms... 6 Overview... 7 About the SSL Certificate Plug-ins... 7 General Procedure of Configuring the SSL Certificates Management Process in PBA... 8 About the Trustwave SSL Plug-in... 9 Configuring the SSL Plug-in... 10 Before Configuring the SSL Plug-in... 10 Configuring the Trustwave SSL Plug-in... 11
C HAPTER 1 Preface This section contains introductory notes and important information about typographical conventions used in this document. In This Chapter Documentation Conventions... 4 Typographical Conventions... 4 Feedback... 5 Documentation Conventions Before you start using this guide, it is important to understand the documentation conventions used in it. Typographical Conventions Formatting convention Type of Information Example Special Bold Items you must select, such as menu options, command buttons, or items in a list. Titles of chapters, sections, and subsections. Go to the Resources tab. Refer to the Managing Your Account chapter.
Preface Italics Monospace Used to emphasize the importance of a point, to introduce a term or to designate a command line placeholder, which is to be replaced with a real name or value. The names of commands, files, and directories. Type a placeholder into the From field, e.g. @@Order_Vendor_Account_BillingC ontact_email@ payflow.verisign.com CAPITALS Names of keys on the keyboard. SHIFT, CTRL, ALT KEY+KEY Key combinations for which the user must press and hold down one key and then press another. CTRL+P, ALT+F4 Feedback Parallels welcomes your feedback on how to make our documentation more helpful. You can submit feedback using the Documentation Feedback form on our website: http://www.parallels.com/support/usersdoc/?problemsubject=feedback+on+help+page Additionally, if you or your colleagues or customers have any feedback on the usability of Parallels Automation, please send it to pa-feedback@parallels.com. Please note that we do not respond to general questions and support requests submitted as feedback. If you submit a technical issue, it will be not responded. To receive customer support, please contact the Parallels support team: http://www.parallels.com/support/home/ 5
Abbreviations and Terms C HAPTER 2 Abbreviations and Terms The following abbreviations and terms are used in this document: PA - Parallels Automation. PBA - Parallels Business Automation. PCP - PA Provider Control Panel. RCP - PA Reseller Control Panel. CCP - PA Customer Control Panel. CSR - Certificate Signing Request. DV SSL Certificate - Domain Validation SSL Certificate, which is issued when the certificate authority checks the right of the applicant to use a specific domain name. Certificate Chain - Set of all the SSL certificates needed to certify the subject identified by the end SSL certificate. This includes the end SSL certificate, the certificates of intermediate certificate authorities, and the certificate of a root certificate authority trusted by all the parties in the chain. CA (Certificate Authority) - An organization that issues SSL certificates.
Overview C HAPTER 3 Overview This section covers: The functional purpose of the SSL certificate plug-ins. The general procedure of configuring the process of SSL certificates management in PA. General information about the Trustwave SSL plug-in. In This Chapter About the SSL Certificate Plug-ins... 7 General Procedure of Configuring the SSL Certificates Management Process in PBA... 8 About the Trustwave SSL Plug-in... 9 About the SSL Certificate Plug-ins SSL certificates in PBA are managed via pluggable modules or plug-ins. Each plug-in allows to establish a network communication with a particular certificate authority system. You can select one or several CAs you want to work with and configure the respective plug-ins. Configuring an SSL certificate plug-in in PBA is part of configuring the entire SSL certificates management process. The configuration procedure is described below in General Procedure of Configuring the SSL Certificates Management Process in PBA (on page 8).
Overview General Procedure of Configuring the SSL Certificates Management Process in PBA Note: The procedure of configuring the SSL certificates management process and the certificates provisioning process are described in the section Managing Certificates of the PBA Provider's Guide. Configuring the SSL certificates management process involves the following actions: 1 Making the necessary preparation steps before the plug-in configuration. To configure the plug-in, you must obtain the necessary access credentials and make some other important preliminary steps. For more detail, see the section Before Configuring the SSL Plug-in (on page 10). 2 Configuring the respective SSL plug-in. To establish communication with the necessary CA to be able to manage SSL certificates from PA, you must configure the respective plug-in in PBA first. For more detail, see the section Configuring the Trustwave SSL Plug-in (on page 11). 3 Allowing customers to generate a CSR and respective private key through PA Online Store. To allow customers to purchase Trustwave SSL certificates in PA Online Store, you must adjust the respective plug-in settings. This is done by allowing the option for customers to generate the CSRs and respective private keys in PA Online Store. For more information, refer to the section Managing Certificates of the PBA Provider's Guide. 4 Creating the certificate service template(s). To set up the necessary Service Plans to be able to sell the SSL certificates, you must configure the respective Service Templates first. For more detail, see the section Managing Certificates of the PBA Provider's Guide. 5 Creating the certificate service plan(s). To be able to sell the SSL certificates, you must create the necessary Service Plans first. For more detail, see the section Managing Certificates of the PBA Provider's Guide. 6 Scheduling the certificate status checks (optional). During the SSL certificate provisioning process, the plug-in periodically checks the certificate status. To manage your SSL certificates more efficiently, you can adjust the default status checks schedule. For more detail, see the section Managing Certificates of the PBA Provider's Guide. After you configure the SSL certificates management process in PBA using the Trustwave SSL plug-in, you can start provisioning SSL certificates issued by Trustwave.
Overview About the Trustwave SSL Plug-in Trustwave SSL Plug-in is a PBA plug-in which establishes communication between the Trustwave certification authority system and PA. The plug-in allows to sell and buy the Trustwave SSL certificates and manage them from PA.
Configuring the SSL Plug-in C HAPTER 4 Configuring the SSL Plug-in This chapter describes the preliminary steps to and the actual procedure of configuring the SSL plug-in. In This Chapter Before Configuring the SSL Plug-in... 10 Configuring the Trustwave SSL Plug-in... 11 Before Configuring the SSL Plug-in Before configuring the Trustwave SSL plug-in in PBA: 1 Sign the necessary SSL service agreement with the Trustwave CA and receive the following credentials necessary to connect PBA to the Trustwave SSL service: User Name Your login name to the Trustwave account. Password Your password to the account. Reseller ID Your Trustwave account ID. URL The Trustwave server URL. You need these two URLs: Test installation URL. Production installation URL. 2 Configure your account settings on the Trustwave side and generate the Trustwave security key.
Configuring the SSL Plug-in Configuring the Trustwave SSL Plug-in To configure the Trustwave SSL Plug-in, do the following: 1 Log in to PBA as Provider or Reseller administrator. 2 Go to System > Settings > Services > Certificates and press Add New Plug-in. The plug-in configuration screen opens. 3 Complete the fields in the following way: Name: Enter the plug-in name (for example, TrustWave SSL Plug-in). Plug-in template: Click drop-down list. 4 Press Save. The plug-in is created. and select TrustWave Certificate Gateway from the 5 Click the newly created plug-in and switch to the Configuration tab. The current settings are displayed. 6 Press Edit and complete all the required fields with the appropriate data: User Name Password Reseller ID URL See Before Configuring the SSL Plug-in (on page 10) for more detail. 7 Press Update. The configuration is saved. 8 Press Test Connection. Make sure the connection test is successful. If the connection test fails, check the settings and / or contact Parallels Support. When you complete the configuration process successfully, you can issue and manage SSL certificates using the Trustwave SSL plug-in.