Skip to main content

Install SSL Certificates

Securing communication with SSL certificates is a critical step in deploying SEI. A valid SSL certificate encrypts data exchanged between users and servers, protecting sensitive information and ensuring browser trust. SSL is required for secure web access, single sign-on (SSO), embedded integrations, and compatibility with features such as the Excel Add-in.


prerequisites

Before you begin, ensure the following:

  • You have a valid .pfx certificate file issued by a trusted certificate authority (not self-signed).
  • The certificate covers all domains you need to secure.
  • The certificate will not expire during your planned installation window—verify the expiration date.
  • The certificate matches your deployment scenario: use a wildcard certificate to cover all subdomains, or a subject alternative name (SAN) certificate for multiple specific server names.

Install the SSL certificate​

  1. Double-click your certificate file to start the Certificate Import Wizard.
  2. Select Local Machine when prompted so the certificate is available to all users and services on the server.
  3. Click Next twice to continue.
  4. Enter the certificate password provided by your organization.
  5. Check Mark this key as exportable if prompted, to allow future backups or installations on multiple servers.
    This is especially useful if you plan to use the same certificate on more than one server (for example, on separate web and distribution servers).
  6. Click Next twice.
  7. Click Finish, then Ok when the confirmation message appears.

Check the certificate expiry date​

  1. Press Windows key + R, then type certmgr.msc and press Enter.
  2. Expand the personal folder and select Certificates in the left pane.
  3. In the right pane, review the Expiration Date column for your certificate.

Determine the certificate type​

  1. In the Certificates Management window (certmgr.msc), double-click your certificate to open it.
  2. On the General tab, review the Issued to line:
    • A wildcard certificate (e.g., *.domainname.com) covers your entire domain and all subdomains.
    • A specific name certificate will show only fixed hosts.
  3. For certificates tied to specific names, go to the Details tab and select Subject Alternative Name to see all server names covered.

note

Record each authorized name—you will need them during installation. Only these names can access the Web Central Point Configurator; all others are blocked.