Topics Map > Getting Started
Topics Map > Production-ready
LCS - Request and setup a SSL certificate
Generate a Private Key and CSR
How to create a CSR (https://kb.wisc.edu/18911#req6)
Submitting the Certificate request
Submitting a request for a new certificate (https://servercertificates.wisc.edu/#!/make-requests).
- Select Other for server type.
- Select 1 year as the term.
- Then paste the entire contents of the .csr file into the CSR field.
Once the Certificate request has been approved an email with a number of certificate options will arrive. The certificate to download is the Certificate only, PEM encoded.
Providing Betty Blocks with your SSL certificate and private key
To complete the process of installing the SSL certificate a support ticket with Betty Blocks needs created. The LCS Service Team will enter this ticket for you. Send an email to serviceteamforlcs@office365.wisc.edu with the following information:
- Application identifier
- Name of the application
- External domain URL
- The SSL certificate (.crt) in a zip file
Once the service team has received the request and entered the ticket with Betty Blocks support. a member of the team will reach out with the BB ticket number TECHSUP-#### that you can reference in a separate email to support:
- Send the private key (.key in a zip file) that was used to generate the certificates’ CSR
- Send to support@bettyblocks.com
- Please, do not send the service team the private key information.
Additional information
Please, keep the following in mind:
- Betty Blocks will only accept SSL certificates with a duration of 12 months or longer. Anything shorter than 12 months will be rejected.
- Betty blocks requires a minimum of 14 days to complete the initial certification process and prior to the expiration date of your website's certificate for a renewal.
- Put a reminder on a calendar to renew the certificate 30 day before expiration to ensure the process has time to complete.
- No notifications from Betty Blocks will occur to remind you the certificate is expiring. Notifications will instead be sent by InCommon to the email address that was provided when the certificate was created 30 days before expiration.
Using wildcard certificates with Betty Blocks
Initial setup
Wildcard certificates are supported by Betty Blocks. To use a wildcard certificate with an application follow the same steps that would be followed for a standard new certificate setup.
Renewals
When renewing a wildcard certificate that used by more than one application. Follow the same steps as in the initial enrollment but include the app identifiers and URLs for each application that the certificate is being used by.