If you know a new certificate is needed
If you know that your UBC subdomain is currently not covered by the certificates that we have on UBC CMS then UBC IT can help you acquire one and have it placed onto UBC CMS. You need to follow steps 1 through 6 (inclusive) at https://confluence.it.ubc.ca/display/ITSecurity/how+to+obtain%2C+deploy+and+verify+an+X.509+certificate
These steps will generate everything we need from you in order to have your site running on HTTPS. Now you need to send us those files. Zip them up, and then add them to UBC Workspace, with a password. Send an email to email@example.com - which will generate a ServiceNow ticket - with a link to the file and share the password with us. We’ll also need to know which domain this is for, in that email.
Once we have that info, we can then speak with the systems team that runs the piece of hardware where the certificates need to reside. They will install the certificate on your behalf.
If it’s a non UBC domain (i.e. yourdomain.com rather than yourdomain.ubc.ca) then you will need to purchase a certificate from https://www.gandi.net/en/security (you need the ‘Standard’ certificate) and then you will need to provide to us (via WorkSpace) the Certificate and the private key used to generate that certificate.
You can also contact UBC security at security[a]ubc.ca for requests or questions about certificates.
*** Please note that you will need to provide the "key" with the certificate so do not lose or delete this file.
Once a certificate is on CMS
We’re nearly there. You have your subdomain registered, you have your SSL certificate installed onto UBC CMS, you have your content on your site ready to go.
- Next, log in to your WordPress Dashboard and navigate to Tools > Domain Mapping and put in your requested domain (such as mysite.ubc.ca) to "Add new domain" and make sure that "Primary domain for this blog" is unchecked.
- Then you may just need to wait to hear back from UBC IT when your requested domain points successfully to our server.
- Then you can log in to the WordPress Dashboard and go back to Domain Mapping and set your requested URL to be the primary domain.