How to Install an SSL Certificate on FileMaker Server

In this tutorial, you will learn how to install an SSL certificate on Claris FileMaker Server. We cover both the command-line method with fmsadmin and the Admin Console interface.

Note: FileMaker is now a Claris product (Claris International Inc., an Apple subsidiary). You may still see the “FileMaker” name throughout the software; recent releases are versioned as FileMaker Server 2024 (21.x).

Generate a CSR code on FileMaker Server

To obtain a commercial SSL certificate signed by a trusted Certificate Authority (CA), you must first generate a Certificate Signing Request (CSR) and send it to your CA for validation.

The CSR is a block of encoded text that holds your contact details, such as domain and company identity. Generating it also creates the matching private key, which you will need during the installation below. You have two options:

• Use our CSR Generator to create the CSR automatically.
• Follow our step-by-step tutorial on how to generate a CSR on FileMaker Server.

When you create the CSR on the server, FileMaker writes two files into the CStore folder: serverRequest.pem (the CSR) and serverKey.pem (the private key). Open serverRequest.pem in a plain-text editor such as Notepad or TextEdit, copy its full contents, and paste them into the corresponding box when you order the certificate from your SSL vendor. Keep serverKey.pem safe. You will import it in the next section.

The CStore folder is located here, depending on your operating system:

• macOS: /Library/FileMaker Server/CStore/
• Windows: [drive]:\Program Files\FileMaker\FileMaker Server\CStore\
• Linux: /opt/FileMaker/FileMaker Server/CStore/

Install an SSL certificate on FileMaker Server

After your CA delivers the SSL certificate to your inbox, open the ZIP archive and extract the files to your device. Depending on your SSL provider, you should receive:

• Your signed SSL certificate (for example, yourdomain.crt).
• The intermediate certificate or CA bundle containing the root and intermediate certificates.

The certificate must use Base64 (PEM) encoding, and the file names should not contain unsupported characters such as an asterisk (*). You can install the certificate in two ways. Pick whichever you prefer.

Method 1: Import with the fmsadmin command line (recommended)

The command line is the most reliable method and works the same on macOS, Windows, and Linux. Open a terminal (or Command Prompt as Administrator on Windows) on the machine running FileMaker Server.

Step 1: Import the certificate. Point the command at your signed certificate, your private key, and the intermediate (CA bundle) file. Adjust the paths to match your files:

fmsadmin certificate import /path/to/yourdomain.crt --keyfile /path/to/serverKey.pem --intermediateCA /path/to/intermediate.crt

• –keyfile points to the private key (serverKey.pem) created with your CSR. Include it whenever the certificate was not generated with fmsadmin certificate create on this server.
• –intermediateCA points to the intermediate certificate, or to the CA bundle if your provider supplied a single bundle file. Always include the intermediate, or browsers will report an incomplete chain.
• If your private key is password-protected, add –keyfilepass followed by the password.

For an encrypted private key, the command becomes:

fmsadmin certificate import /path/to/yourdomain.crt --keyfile /path/to/serverKey.pem --intermediateCA /path/to/intermediate.crt --keyfilepass yourPrivateKeyPassword

FileMaker combines the signed certificate with your private key and writes a new serverCustom.pem file into the CStore folder.

Step 2: Restart FileMaker Server. The certificate only takes effect after a restart of the Database Server:

fmsadmin restart server

You will be prompted for your Admin Console user name and password. Once the service restarts, FileMaker Server serves your new certificate and routes connections over HTTPS.

Method 2: Import with the Admin Console (graphical interface)

If you prefer a graphical workflow, use the Admin Console. When you first connect to a fresh deployment, FileMaker Server prompts you to import an SSL certificate; you can also import one at any time afterward.

1. Open the Admin Console and go to the Configuration > SSL Certificate tab.
2. Click Import Custom Certificate and complete the fields:
   • Signed Certificate File: click Browse and select your primary SSL certificate file.
   • Private Key File: click Browse and select your private key (serverKey.pem) from the CStore folder. If you generated the CSR on another platform, upload that platform’s private key instead.
   • Intermediate Certificate File: click Browse and select your intermediate certificate or CA bundle file.
   • Private Key Password: if you set a password for your private key, enter it here. Otherwise leave it blank.
3. Click Import.
4. Restart FileMaker Server to activate the certificate.

Congratulations, you have successfully installed an SSL certificate on FileMaker Server.

Running an older release? The flow is the same on FileMaker Server 17 and later: import the signed certificate, private key, and intermediate file via Admin Console (Configuration > SSL Certificate) or the fmsadmin command line, then restart. We recommend upgrading from end-of-life versions such as FileMaker Server 15, 16, and 17 to a currently supported release for security updates and modern TLS support.

Test your SSL installation

After you install the certificate on FileMaker Server, check the new installation for errors and configuration weaknesses. Use our SSL checker for instant scans and reports on the state of your certificate and its chain. You can also open your FileMaker Server address (for example, the Admin Console or WebDirect URL) in a browser and confirm the padlock and a complete, trusted certificate chain.

Where to buy the best SSL certificate for FileMaker Server?

The best place to buy an SSL certificate for FileMaker Server is from a reputable SSL vendor such as SSL Dragon. Our prices are among the lowest on the market, but there are more benefits: regular discounts and exclusive deals across our entire range, and above all, dedicated customer support. All our products are compatible with FileMaker Server.

SSL Dragon takes care of your sensitive data security, so your website or business can succeed online.

You can also use our helper tools, the SSL Wizard, to find the perfect SSL product for your project.

Frequently Asked Questions