Administrators must upload the certificate from the zip file provided by the GoDaddy application to Okta Access Gateway (OAG). Upload the certificate using the Access Gateway Management console and paste the required certificate and key files.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Okta Access Gateway (OAG)
• Secure Sockets Layer (SSL) Certificate
• GoDaddy
• Certificate Signing Request (CSR)

How is a GoDaddy certificate uploaded to Okta Access Gateway?

Connect to the Access Gateway Management console using a Secure Shell connection and navigate the menus to add or modify a certificate.

1. Connect to the Access Gateway Management console using a Secure Shell (SSH) connection. Review the Management Console command-line reference documentation for additional details.
2. Enter 2 to open the Services submenu.
3. Enter 1 to open the NGINX submenu.
4. Enter 6 to update a Secure Sockets Layer (SSL) certificate and view the list of certificates.
5. Enter one of the following commands:
   • x: Exit the Add/modify certificates submenu.
   • a: Add a certificate. Review the Add a certificate documentation for instructions.
   • #: Modify a certificate. Review the Modify a certificate documentation for instructions.

Format and Paste the GoDaddy Certificate Files

Extract the GoDaddy zip file and paste the issued certificate and bundle files into the console, followed by the private key.

When GoDaddy issues a certificate, administrators submit a Key and Certificate Signing Request (CSR). Upload the Key to Okta Access Gateway after copying the certificate into the management console. If the key is missing, submit a new Key and CSR to GoDaddy.

The GoDaddy zip file contains three files:

• .crt (issued certificate)
• .pem (issued certificate)
• gd_bundle-g2-g1.crt

The .crt and .pem files are identical. Use the .pem file for Okta Access Gateway.

When uploading the certificates, paste the .pem (issued certificate) into the console, and then paste the gd_bundle immediately after it. The bundle can contain up to three certificates, for a total of four certificates.

-----BEGIN CERTIFICATE-----
.pem cert
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
gd_bundle
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
gd_bundle
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE----- 
gd_bundle 
-----END CERTIFICATE----- 
Then press ctrl d and paste the key in.

How is the certificate installation tested and validated?

Save the application to push the certificate to each node and execute the following commands to verify the connection and view the active certificates.

Execute the following command to view the certificates in use.

openssl s_client -showcerts -connect <OAG_Ip_Address>:443 -servername <Public Domain>

Execute the following command to display connection errors.

curl -v  https://<oag-public domain>

Related References

• Upload certificates