Steps to Obtain or Renew SSL Certificates

Each Certificate Authority (CA) has its own process for handling certificates, and this is something the organization's website administrator or IT team should manage.

To obtain a certificate, bundle, and private key from a Certificate Authority (CA), follow these steps:

1. Generate a Private Key and CSR: SugarCRM Support can assist with this step if needed.

2. Submit the CSR to a Certificate Authority (CA): Choose a CA (e.g., DigiCert, GoDaddy, Let’s Encrypt), provide them with the CSR, and complete the domain validation (via email, DNS, or file upload).

3. Download the Issued Certificate: Once approved, the CA provides:

  • The certificate file (your SSL/TLS certificate)
  • The CA bundle (intermediate/root certificates for the trust chain)

4. Provide SugarCRM Support with the certificate, bundle and private key files.

Keep your private key secure, as it is essential for SSL/TLS encryption. If lost, a new CSR must be generated for a reissued certificate.