How to install the SSL certificate on Juniper Netscreen?

The Juniper Networks Secure Services Gateway 500 Series (SSG) represents a new class of purpose-built security appliances that delivers a perfect mix of high-performance, security, and LAN/WAN connectivity for regional and branch office deployments.

With proven network and application-level protection, the SSG 550 and SSG 520 can be implemented as standalone security devices to stop worms, Spyware, Trojans, malware, and other emerging attacks. In addition, the SSG 500 Series combines security and LAN routing functionality from the market-leading firewall appliances running ScreenOS with best-in-class routing hardware and WAN protocols from the Juniper Networks J-series routers and JUNOS. The result is a high-performance security platform that can be deployed as a combination firewall and routing device for those customers who wish to consolidate devices and reduce IT expenses. The Secure Services Gateway 500 Series provides customers with the following features and benefits:

• Dedicated, security-specific processing hardware, and software platform delivers the performance required to protect high-speed LAN as well as lower speed WAN connections
• Advanced security features such as network segmentation that allow you to isolate guests, wireless networks, and regional servers or databases from the rest of the branch to address regulatory compliance requirements
• Extensible I/O architecture delivers LAN and WAN connectivity options on top of unmatched security to reduce costs and extend investment protection

SSL INSTALLATION:

1. In the WebUI Options menu, select Objects and Certificates.
2. Load the Primary certificate:
   Select the circle to load a ‘Cert.’ Next to ‘Show’ select Local. Next, ‘Browse’ for the Primary (your_domain_name.crt) certificate you downloaded from your DigiCert Account, and hit Load.
3. Load the Intermediate Certificate:
   Select the circle to load a ‘Cert.’ Next to ‘Show’ select CA. Next, ‘Browse’ for the Intermediate (DigiCertCA.crt) certificate you downloaded from your DigiCert Account, and hit Load.
4. Load the Root Certificate:
   Select the circle to load a ‘Cert.’ Next to ‘Show’ select CA. Next, ‘Browse’ for the Root (TrustedRoot.crt) certificate you downloaded from your DigiCert Account, and hit Load.
5. Verify that your primary certificate loaded as a ‘Local’ certificate. The Intermediate and Root certificates should have loaded as CA certificates. If the Primary certificate is loaded as a CA certificate, something is wrong. This usually happens because the domain is not properly set up on the device. To resolve this, you will need to configure the domain name (see CSR creation instructions), create a new CSR for a new certificate, and install the certificate again.

We hope this article helped you with this easy process. If you cannot use these instructions, we recommend you contact either the vendor of your software or the hosting organization that supports it.