How to obtain a digital certificate for a server

How to obtain a digital certificate for a server

How can I obtain a digital certificate for my server? Why would I want to do this?

    Requires Free Membership to View

    SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

Digital certificates are a critical component of Internet security. They allow Internet users to securely and reliably retrieve the public keys of application servers, such as web and file servers, facilitating the secure, encrypted exchange of information.

In order to use SSL-protected communications, such as exchanging Web traffic using the HTTPS protocol, an enterprise must first purchase and then install a digital certificate on its server. This involves selecting a certificate authority (such as Verisign or Thawte), proving your identity to that CA, paying a certificate fee and installing the certificate on the server. The exact technical steps will depend upon the type of server you're running, but each CA has detailed instructions on their websites for obtaining a certificate.

It's important that you obtain a digital certificate if you wish to provide users with the ability to securely connect to your website. Without a certificate, they will be unable to use SSL encryption to connect to your site and will not have a guarantee of your server's identity or the peace of mind that their information is encrypted while in transit over the Internet.

More information:

  • A SearchSecurity.com reader asks Michael Cobb, "When choosing a digital certificate, how important is the expiration period?"
  • Learn more about the personal digital certificates that enterprises will need during a PKI implementation.
  • This was first published in December 2008