In this guide, you will learn how to install an SSL certificate on Axway Gateway. If you haven’t applied for a certificate yet, the first part shows you how to generate a CSR code and submit it to the Certificate Authority. The last two sections include brief information about Axway API Gateway and useful tips on where to buy an SSL certificate for your API Gateway.

Generate the CSR code for Axway API Gateway

When it comes to CSR generation, you have several options. The quickest way is to use an external tool such as our CSR Generator. Alternatively, you can create your CSR using the OpenSSL utility. If you’re on a Linux system, OpenSSL should be already installed by default. For Windows systems, you may need to download it first from here.

Along with your certificate, you will also generate your private key. Make sure you keep it in a safe place, and never share it with anyone. To generate your CSR in OpenSSL, follow the steps below:

  1. Connect via SSH (Secure Shell) to your server’s terminal and run the following command:
    openssl req -new -newkey rsa:2048 -nodes -keyout yourdomain.key -out yourdomain.csr
    You will have to replace yourdomain with your actual domain name
  2. Next, you need to provide your contact data. Use the example below:
    • Country Name: enter the two-letter code of your country. For instance, the US
    • State or Province Name: enter the full name of the state or region where your company is registered. For example, California
    • Locality Name: enter the name of the city or town where your company is registered. For example, San Diego
    • Organization Name: enter the official name of your company. For instance, YourCompany LLC
    • Organization Unit Name: Specify the department within your organization in charge of SSL management. For example, IT
    • Common Name: enter the FQDN (Fully Qualified Domain Name) you want to secure with an SSL certificate. For example,
    • Email Address – provide an email address
    • A challenge password: you can leave this field blank
    • An optional company name: you can leave this field blank

OpenSSL will create the . csr and . key files. Save the files. Open the .csr file with a text editor such as Notepad, and copy-paste its contents in the relevant box during your SSL order process.

Install An SSL certificate on Axway API Gateway

After you submit the CSR to your Certificate Authority, it will issue the necessary installation files via email. You will need to download the zip archive and extract its contents on your device. Then, you’ll have to import your primary SSL certificate and private key in the appropriate keystore in Policy Studio. To complete your installation, follow the steps below:

  1. Connect to your API Gateway instance in Policy Studio.
  2. On the left pane, select Certificates.
  3. Depending on your situation, choose one of two available options:
    • Design-time: Click Keystore, then click Add to keystore on the subsequent dialog box. This imports the certificate and private key into the key store for Policy Studio.
    • Run-time: Click Create/Import. This imports the certificate and private key into the runtime key store for API Gateway.
  4. In the X.509 Certificate tab, click on Import Certificate if the certificate and the private key in separate files. Click on Import Certificate + Key if the certificate and its private key are both in the same file.
  5. Locate your primary certificate or the file that contains both the certificate and private key. Ensure that the selection box indicates the right format for your file (usually .pem).
  6. In the Private Key tab, click on Import Private Key
  7. Browse to your private key file. Ensure that the selection box indicates the right format for your file. 
  8. Click on OK to complete the installation of your SSL certificate.

After you install an SSL Certificate on Axway API Gateway, you should run a quick test and check your new SSL certificate for potential errors and vulnerabilities. We have an entire article on our blog, describing the best SSL tools to scan your SSL installation.

What is Axway API Gateway?

Axway API Gateway provides enterprise-grade delivery and governance of web APIs that connect back-end applications and third-party systems, cloud apps, mobile devices, and the Internet of Things (IoT). Using a graphical configuration over code approach, this technology streamlines the development of APIs across a wide range of protocols and formats (including REST, SOAP web services, XML, messaging, and WebSockets). 

Axway Gateway is a service of Axway Software, an American publicly held information technology company, headquartered in Phoenix, Arizona. 

Where to buy the best SSL certificate for Axway API Gateway?

The best place to get an SSL Certificate for Axway API Gateway is from SSL Dragon. We offer the best prices and discounts on the entire range of our SSL products. We’ve carefully selected the best SSL brands on the market to secure your website. All our SSL certificates are compatible with Axway API Gateway. Here are the types of SSL certificates we offer:

To help you choose the right SSL certificate for your project, we created a handy SSL tool. Our SSL Wizard will recommend the optimal SSL product based on your website and budget.

If you find any inaccuracies, or you have details to add to these SSL installation instructions, please feel free to send us your feedback at [email protected] Your input would be greatly appreciated! Thank you.