How to Install an SSL Certificate on MiCollab Server

In this tutorial, you will learn how to install an SSL certificate on a Mitel MiCollab Server. MiCollab is a unified communications appliance, so the whole process runs in the web admin, the MiCollab Server Manager. There are no shell commands.

Generate a CSR code on MiCollab Server

If you’ve already generated the CSR and received the certificate from your CA, skip part one and jump straight to the installation steps.

When you apply for an SSL certificate, the first requirement is to create a CSR (Certificate Signing Request) and submit it to the Certificate Authority (CA). The CSR is a block of encoded text that contains your contact details, such as domain and company identity. Generating the CSR also creates the matching private key, which stays on the server and pairs with the certificate the CA issues.

You have two options:

• Generate the CSR automatically using our CSR Generator.
• Follow our step-by-step tutorial on how to generate a CSR on a MiCollab Server.

Open the CSR file with any plain-text editor, such as Notepad, and copy its contents into the matching box during the certificate order with your SSL vendor. Once the CA validates your request and issues the certificate, continue with the installation below.

Install an SSL certificate on MiCollab Server

After the CA signs and delivers your certificate by email, download the ZIP archive and extract the files. Make sure you have the following ready for installation:

• The signed SSL certificate for your domain.
• The intermediate certificate (or the CA bundle, which holds the intermediate and root certificates in one file).

Note: MiCollab requires the intermediate certificate. If you skip it, the upload fails with an installation error, and MiCollab Mobile Client deployments will not work because clients cannot download their configuration without the full chain. Some CAs deliver the intermediate and root together in a single CA bundle (also called an SSL chain file); that single file is fine to use in the intermediate field.

MiCollab expects the certificate and intermediate files in PEM format (Base64 text that begins with —–BEGIN CERTIFICATE—–). A PEM file looks like this:

-----BEGIN CERTIFICATE-----
MIIDdzCCAl+gAwIBAgIEbDd4...
(your Base64-encoded certificate)
-----END CERTIFICATE-----

The Upload and install a web server certificate option accepts certificates and keys based on the RSA algorithm. If your CA delivered the certificate in another encoding, such as .cer or .crt in DER (binary) form, convert it to PEM first with our SSL tools or OpenSSL.

Step 1: Open the Web Server Certificate page

• Sign in to the MiCollab Server Manager (the MSL Server Manager web admin).
• Under Security, click Web Server.
• Select the Web Server Certificate tab.

Step 2: Choose the upload option

From the available options, choose Upload and install a web server certificate, then click Perform. This is the option for a certificate from a third-party Certificate Authority, as opposed to a self-signed certificate.

Step 3: Select your certificate files

• Next to the SSL Certificate field, click Browse, locate your signed certificate, and click Open.
• Next to the Intermediate SSL Certificate field, click Browse, locate your intermediate certificate or CA bundle file, and click Open.

Step 4: Install the certificate

Click Install Web Server Certificate. MiCollab installs the certificate against the private key already on the server and applies the new chain. On current MiCollab releases, the affected services (such as the MiCollab Client Service and WebRTC) restart automatically, so a manual server restart is usually not required. If the Server Manager prompts you to restart, or if you are on an older release, restart the MiCollab Server to finish.

Congratulations, you’ve successfully installed an SSL certificate on MiCollab Server.

Test your SSL installation

After installing the certificate, scan your configuration to catch any errors or chain problems before users connect. Open the MiCollab management URL in a browser and confirm the padlock shows a valid, trusted certificate with the correct hostname and expiry date. For a deeper check, run the address through our SSL Checker, which returns an instant report on every part of your certificate and its configuration.

Frequently Asked Questions