Configuring Apache to use SSL certificate

When using HTTPS to connect to the Lexmark Management Console or Print Management Console, obtain a valid SSL certificate for the server. This process is necessary only for the LDD load balancer server.

Note: When using LDD version 4.8 or later, enter https://LBaddr/lmc, where LBaddr is the host name or IP address of the LDD load balancer server. This URL accesses the Lexmark Management Console or Print Management Console.

  1. Log in to console of the server, hosting the LDD load balancer.

  2. Open the command prompt as an administrator.

  3. Navigate to the <install-Dir>\lexmark\solutions\Apache2\bin folder, where <install-Dir> is the installation folder of LDD.

  4. In the command prompt, type the set OPENSSL_CONF=<install-Dir>\lexmark\solutions\Apache2\conf\openssl_ldd.cnf line, where <install-Dir> is the installation folder of LDD.

  5. Type the following command:

    openssl req -new -newkey rsa:2048 -nodes -out <lddserver.csr> -keyout <lddserver.key> -subj "/C=US/ST=KY/L=Lexington/O=Lexmark/OU=NA/CN=lddserver.domain.com"
    Note: Omitting the -subj and the path prompts the OpenSSL to require a value. You may consult with your certificate authority team for the appropriate values. The fully qualified name is built for this server, but the subject data is unique per customer.

  6. Send the lddserver.csr file to your certificate authority team.

  7. Save the signed certificate as a PEM file, for example, lddserver.pem.

  8. Copy the following to the <install-Dir>\lexmark\solutions\Apache2\conf folder, where <install-Dir> is the installation folder of LDD:

  9. From the <install-Dir>\lexmark\solutions\Apache2\conf\ldd-cert.conf for LDD versions 5.1 and later or <install-Dir>\lexmark\solutions\Apache2\conf\httpd-ssl.conf file for LDD versions 5 and earlier, update the following:

    Sample configuration

    SSLCertificateFile "<install-Dir>/Lexmark/Solutions/Apache2/conf/lddserver.pem"

SSLCertificateKeyFile "<install-Dir>/Lexmark/Solutions/Apache2/conf/lddserver.key"

SSLCertificateChainFile "<install-Dir>/Lexmark/Solutions/Apache2/conf/ca.pem"

    Where <install-Dir> is the installation folder of LDD.

  10. Save the file.

  11. Restart the Apache service.

Access the LDD load balancer server, and then verify whether your certificate authority has signed the certificate on the website.

Note: The CN value for the certificate signing request in lddserver.domain.com must be the same value for accessing the server when using Lexmark Management Console. Using only the IP address or host name generates an invalid certificate error when accessing the server when it does not match the certificate.