Papercut SSL Certificate Installation

 Problem Description : 

Steps to install an SSL Certificate on the Papercut system

 Resolution : 

NOTE: This process uses an exported Certificate from Windows IIS, meaning that you must have at least one current certificate (Windows) already installed on an IIS Server.

Export to PFX file

1) Please start the Microsoft Management Console (MMC)

2) Add the Certificates Snap-in for the Computer account.

3) Under the Personal section of the MMC there should be a folder called "Certificates", open it.

4) Right-click on the SSL certificate you'd like to export (will be issued to *.gordonstate.edu - look at expiration date to make sure it is the correct one).

5) Hover over "All Tasks", from here one should see the option to Export...

6) Go through the wizard, make sure you export the private key. 

7) While going through the wizard, accept defaults. enter a password for the private key (remember the password because you will need it in the next steps)

8) Once you have dropped out of the wizard you should have a PFX file.

Then import the certificate into your own PaperCut keystore on the PaperCut Server

Taken from https://www.papercut.com/kb/Main/SSLWithKeystoreExplorer

Download and install the latest release of KeyStore Explorer from: http://www.keystore-explorer.org/downloads.html 

This can be installed on any PC with Java 7 or above.

Depending on the version of JRE you have installed, KeyStore Explorer might ask you to update Java’s cryptography Libraries. Follow the prompts and it will guide you through this. 

Importing an Existing Certificate

Open Keystore Explorer that you just installed above.

1) Click Create a new Key Store 

2) Select JKS, then click OK 

3) Click the Import Key Pair icon

4) Select the type of certificate you are using, then click OK (PKCS #12 for PFX file exported from Windows)

5) Browse and choose the PFX file and add the password that you used when you expored the PFX file. Click Details to verify the certificate. If you get an error, it could be the password or the wrong certificate type.

6) In the Enter Alias field, enter an alias for the newly imported Certificate, then click OK 

7) Set a password for the key, then click OK. Entering the password that you used when you expored the PFX file is fine.

8) Save the KeyStore (ex. my-ssl-keystore2018)

9) Set a password for the KeyStore , then click OK 

10) Copy the saved keystore to c:\Program Files (x86)\PaperCut NG\server\custom\

Installing the Keystore

The previous sections described how to create a keystore file

Now we will use the keystore file to configure the PaperCut Application Server to use the new keystore/certificate:

1.   1.    Make sure new keystore is saved at c:\Program Files (x86)\PaperCut NG\server\custom\

2.       Open the file c:\Program Files (x86)\PaperCut NG\server\server.properties with a text editor (e.g. Notepad).

3.       Locate the section titled SSL Key/Certificate.

4.       Remove the # (hash) comment marker from all lines starting with "server.ssl" (if not already done so).

5.       Define the location of your keystore, keystore password and key password as chosen previously. The file should look something like this:

server.ssl.keystore=custom/my-ssl-keystore

server.ssl.keystore-password=password

server.ssl.key-password=password

6.       Restart the PaperCut NG Application Server and verify all is working by going to the URL https://pcut.gordonstate.edu:9192/user. 

 Revision Date : 9/25/2018