How to create and install a new server certificate in TRITON or Forcepoint Infrastructure using Open SSL

Please contact the Technical Escalations Group in Support to get instructions for that version.

Creating and installing a certificate for version 8.0.0 resulted in the Infrastructure and Data Security Web Server services not being able to start after certificate installation with Error 1067: The process terminated unexpectedly.

For version 8.0.0, follow the Internal steps in this knowledge article, then perform the following steps afterwards. (Note that these instructions contain a potential security breach, which the customer should be made aware of before proceeding.)

Remove the password from the server private key (httpd-server.key): 

openssl rsa -in httpd-server.key -out httpd-server.key.raw 
copy httpd-server.key httpd-server.withpass 
ren httpd-server.key httpd-server.key.bak 
ren httpd-server.key.raw httpd-server.key

Comment out SSLPassPhraseDialog in HTTPD's ssl configuration file (C:\Program Files (x86)\Websense\Web Security\apache\conf\extra\httpd-ssl.conf) 
Restart EIP's web server 

The issue is the result of difficulties reading a key with a password. It is resolved in v8.0.1 by following the procedure in the above article.