Use these instructions to create your CSR (certificate signing
request) and then, to install your SSL and intermediate certificates.
*
To create your CSR, see Mac OS X Yosemite: Create Your CSR.
*
To install your SSL Certificate, see Mac OS X Yosemite: Install Your
SSL Certificate.
For El Capitan Server (10.11), please see Mac OS X El Capitan: Create
CSR & Install SSL Certificate
[https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/1108/38/os-x-el-capitan-server-c...
Use these instructions to create your CSR (certificate signing
request) and then, to install your intermediate and server (SSL)
certificates.
*
To create your CSR, see Mac OS X El Capitan: Create Your CSR.
*
To install your SSL Certificate, see Mac OS X El Capitan: Install Your
SSL Certificate.
For Yosemite Server (10.10), please see Mac OS X Yosemite: Create CSR
& Install SSL Certificate
[https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/1107/38/os-x-yosemit...
GENERATING A CERTIFICATE SIGNING REQUEST (CSR) USING OPENSSL (APACHE &
MOD_SSL, NGINX)
A CSR is a file containing your certificate application information,
including your Public Key. Generate your CSR and then copy and paste
the CSR file into the web form in the enrollment process:
GENERATE KEYS AND CERTIFICATE:
To generate a pair of private key and public Certificate Signing
Request (CSR) for a webserver, "server", use the following command :
> OPENSSL REQ -NODES -NEWKEY RSA:2048 -KEYOUT ...
Generating a CSR using WHM/CPanel
Generate an SSL certificate
You can generate an SSL certificate, consisting of an RSA private key and certificate, for any domain using WebHost Manager. This will allow viewers of an SSL site to verify the identity of the web site by its public key.
To generate an SSL certificate:
Click on the Generate an SSL certificate and Signing Request link in the SSL/TLS menu. Enter the email address to send the certificate to in the 'Email Address the Cert will be ...
GENERATING A CERTIFICATE SIGNING REQUEST (CSR) USING APACHE VIA ENSIM
WEBPPLIANCE 3.1.X
Login to the Site Administrator or Appliance Administrator and select
the site to administer.
Select Services
Select the Actions box next to Apache Web Server and then select SSL
Settings
Select Generate and fill in the required details, the site name will
automatically be entered into the Common Name field, ensure this is
correct and contains the Fully Qualified Domain Name (e.g.
secure.comodo.com, w...
F5 FIRE PASS
Generating a certificate request
To generate a certificate request, perform the following steps:
From the Admin's Console, click Server.
Click Security.
Click the Certificates link.
Click the Generate link next to Generate New Certificate Request.
The SSL Server Certificate form displays.
Populate the fields.
Important: Be sure to make a note of the password that you use in the Encryption Password field. This password is required to install the signed certif...
Generating a Certificate Signing Request (CSR) in H-Sphere
Log into your user Control Panel.
Click SSL on your control panel home page.
Enable SSL for the domain in the list.
One the Edit SSL page click the Import SSL certificate link.
On the page that appears, click Generate a temporary SSL certificate and certificate request.
On the page that appears, edit and apply your details by clicking the Submit button:...
GENERATING A CERTIFICATE SIGNING REQUEST (CSR) USING IBM HTTP SERVER
USING IKEYMAN FOR CSR GENERATION
Note: If you are starting IKEYMAN to create a new key database file,
the file is stored in the directory where you start IKEYMAN.
TO CREATE A NEW KEY DATABASE:
* A key database is a file that the server uses to store one or more
key pairs and certificates. You can use one key database for all your
key pairs and certificates, or create multiple databases.
* Enter IKEYMAN on a command l...
IBM WebSphere Advanced Single Server Edition 4.0
Before being able to enable SSL on WebSphere, you need to have your own certificate. This certificate can be a self-certificate for testing purpose but in any production case, you should have a certificate issued by a Trusted CA. The following steps describe how to get your own certificate.
Creating a keystore
A keystore is where your private key will be saved, in a secure way, and the certificate belongs to it. This keystore can be...
GENERATING A CERTIFICATE SIGNING REQUEST (CSR) USING JAVA BASED WEB
SERVERS
1. CREATE KEYSTORE WITH KEYTOOL
--> KEYTOOL -GENKEY -KEYALG RSA -KEYSIZE _2048_ -KEYSTORE
_DOMAIN.KEYSTORE_
If you want to use an alias for the site certificate include -alias
MY_SITE (where MY_SITE is the alias name), default is mykey.
(NOTE validity may vary)
The following questions will be asked if not known:
Enter keystore password: (NOTE remember this for later use)
What is your first and last name? - This...
GENERATING A CERTIFICATE SIGNING REQUEST (CSR) USING LOTUS DOMINO
SERVER VERSIONS 4.6X AND 5.0X
FOR VERSION 4.6X:
* From the administration panel, click System Databases and choose
Open Domino Server Certificate Administration (CERTSRV.NSF) on the
local machine. Click Create Key Ring.
* Enter a name for the key ring file in the "Key Ring File Name"
field.
* Enter a password for the server key ring file in the "Key Ring
Password" field.
Note: The password is case sensitive.
* Select a...
IBM-Lotus Domino Go 4.6.2.6+ CSR Creation
Start the MKKF utility by typing mkkf at the command prompt
The system displays a menu page
Note: The MKKF utility places the keyring file in the current directory unless otherwise specified
Select N to create a new key ring file
After you type in a key ring file name, the next menu screen will come up
Select W to work with keys and certificates
Select C to create a new key and certificate request.
Type a password when prompted
Sel...
Generating an IIS SSL Certificate Signing Request (CSR) using Microsoft IIS 5.x / 6.x
A CSR is a file containing your IIS SSL certificate application
information, including your Public Key. Generate your CSR and then copy
and paste the CSR file into the webform in the enrollment process:
Generate keys and Certificate Signing Request:
Select Administrative Tools
Start Internet Services Manager
Open ...
SECURING YOUR OUTLOOK WEB ACCESS 2000 IMPLEMENTATION USING SSL
CREATING A CSR
* Using the Internet Services Manager.
* Right click on the website that is hosting your OWA component (this
is by default the "DEFAULT WEB SITE") and open its properties.
* Select the "DIRECTORY SECURITY" tab and then click on "SERVER
CERTIFICATES". The "WEB SERVER CERTIFICATES WIZARD" will now be
displayed, click Next.
*
On the "SERVER CERTIFICATE" dialogue box (below), we are going to
select "CREATE A N...
Generating a Certificate Signing Request (CSR) using
I-Planet Web Server
1. Sign onto the Webserver and select the server to manage
2. Select the Security tab and then Request a Certificate
3. Complete the required boxes and click OK
4. In the CA e-mail field, put your own e-mail address. An email is then sent to the email address specified containing your
CSR
5. The CSR will be required when requesting your certi...
Generating a Certificate Signing Request (CSR) using Novell ConsoleOne
You import a public key certificate after you have created a Certificate Signing Request (CSR) and Comodo has returned the signed public key certificate to you.
To create a Certificate Signing Request (CSR) :
Log in to the eDirectory tree as an administrator with the appropriate rights.
Start ConsoleOne
Right-click the container object that contains th...
Generating a Certificate Signing Request (CSR) using Novell I-Chain
There are 2 possible views for creating a CSR, the alternative view is at the bottom of this page.
Start the ichain Management http://youriChain:1959/appliance/config.html
Select the Home-Certificate Maintenance panel.
Select Create to create the CSR
Enter the following fields:
Certificate name - Any alphanumeric name as long as it is unique
Subject name - The DNS name of the site that is to be s...
GENERATING A CERTIFICATE SIGNING REQUEST (CSR) USING PLESK SERVER
ADMINISTRATOR
A CSR is a file containing your certificate application information,
including your Public Key. Generate your CSR and then copy and paste
the CSR file into the webform in the enrollment process.
Important Notes on Certificates In order to use SSL certificates for a
given domain, the domain MUST be set-up for IP-Based hosting. If the
given domain has the www prefix enabled, you must set-up your CSR with
the www pre...
PLESK SERVER ADMINISTRATOR 7 CSR CREATION
* Login to the Plesk 7 Control Panel.
* From the left hand menu, select 'Domains'.
* Click on the domain name that you wish to generate the CSR for.
* Click on the 'Certificates' menu item.
* Click on the 'Add New Certificate' item.
* Fill out the information on the page. All items noted by red
asterisks must be filled in
* Press the 'Request' button.
* You will then be returned to the Certificates menu. From the list
at the bottom of th...
Generating a Certificate Signing Request (CSR) using SonicWALL SSL Offloader
Step 1: Install OpenSSL
In order to be able to generate a CSR, you will need to have OpenSSL installed on your computer.
Step 2: Create your Certificate Signing Request
To generate a key pair consisting of Private Key and Certificate Signing Request (CSR) use the following command:
openssl req -new -des3 -keyout key.pem -out req.pem
You will now be asked to enter the following data for your CSR:
• C...
GENERATING A CSR FOR INTEL NETSTRUCTURE 7110 E-COMMERCE ACCELERATOR
Use the create key command to create your key and the create sign
command to create a signing request to be authenticated.
Create a key:
Type the create key command at the prompt:
Intel 7110> create key
Key strength (2048)
New keyID [001]: 002
Keypair was created for keyID: 002
Create a Certificate Signing Request:
Intel 7110> create sign 002
You will now be asked to enter information that will be incorporated
into...
GENERATING A CERTIFICATE SIGNING REQUEST (CSR) USING WEBSITE PRO 3.X
A CSR is a file containing your certificate application information,
including your Public Key. Generate your CSR and then copy and paste
the CSR file into the webform in the enrollment process.
GENERATE KEYS AND CERTIFICATE SIGNING REQUEST:
* Open Website Server Properties and select Key Ring
* Select New Key Pair and follow the wizard:
* Ensure all the details you enter are correct.
* When you have completed the...
Webstar 4.x CSR generation
Step 1: Generate a Private Key
Launch CSR Utility
This can be found in the SSL Tools folder under the Webstar Installation.
Enter a password to protect your private key. Make sure that the password is at least 8 characters in length.
Numbers, Letters and Punctuation are acceptable!
Click Create Key to create the Private Key.
Step 2: Generate your Certificate Signing Request (CSR)
Choose Certificate Request in the Action menu of the CSR U...
Webstar 5.x CSR generation
Step 1: Generate a Private Key
Start the 4D WebSTAR Admin Client and login to your WebSTAR 5 server.
Select Generate Keys and CSRs from the Tools menu
In the Name field enter the name for your private key file.
In the Password field enter a password to protect your private key.
Make sure that the password is at least 8 characters long, includes
letters, numbers and punctuation, and is not a name or a word. Write ...
GENERATING A CERTIFICATE SIGNING REQUEST (CSR) USING ZEUS
Login to the web server
Select SSL CERTIFICATES
Against CREATING A CERTIFICATE SET select CREATE
Select BUY A CERTIFICATE FROM ANOTHER CERTIFYING AUTHORITY, then click
OK
Complete the fields with your specific information, then click OK
Copy the CERTIFICATE SINGING REQUEST (CSR) text into a text editor for
later use when requesting your certificate
Step 1: Generate the CSRFrom the menu bar, choose 'Operations > Create Certificate Request'
Then 'Create Certificate' dialog box appears.
Enter the following information in the required fields:
Common Name: Enter the fully qualified domain name (FQDN) that is to be secured. Example: If www.mydomain.com is the FQDN, then enter www.mydomain.com
Organizational Unit: This field is optional; use it to help identify certificates. To skip the organization unit (OU) field press enter on ...
To generate a CSR for Infinite InterChange follow the instructions
below:
Before you obtain a Certificate, you must generate a Certificate
Signing Request (CSR) and a private encryption key. The SSL Module
installation program prompts you to generate a server certificate
after installing the SSL Module files.
If you generated a server certificate during the installation, you
also created a CSR and a private encryption key. Go to the Infinite
InterChange or WebMail SSL subdirectory. This dir...
CREATING A CSR ON EXCHANGE 2007
In order to create a CSR on Exchange 2007, you must use the
New-ExchangeCertificate cmdlet which can be used from the Exchange
Management Shell (EMS)
NOTE: Exchange Management Shell: Click Start, click Programs, and
then click Microsoft Exchange Server 2007. Then click Exchange
Management Shell.
The 'GenerateRequest' parameter for this cmdlet will create the CSR,
as a PKCS#10 file which we will then use to create your certificate.
The 'SubjectName' paramete...
Creating A CSR for the VPN 3000 Series Concentrator
Step 1. In the Administration | Certificate Management screen. Click Click here to Enroll with a Certificate Authority. The Administration | Certificate Management | Enroll screen displays.
Figure 1 Administration | Certificate Management | Enroll Screen
Step 2. Click Identity certificate. The Administration | Certificate Management | Enroll | SSL certificate screen displays.
Step 3. Click Enroll via PKCS10 Request (Manual). The Ad...
* NOTE As an alternative to the manual instructions on this page,
Comodo offers a free utility which will help you generate a CSR,
submit it to Comodo and then automatically install your certificate on
your IIS website. Click here
[https://www.comodo.com/ssl-certificate-auto-installer/index.html] to
find out more.
GENERATING A CSR ON IIS 7.X
* Click START.
* Select ADMINISTRATIVE TOOLS.
* Start INTERNET SERVICES MANAGER.
* Click SERVER NAME.
*
From the center menu, double-click t...
1. Create RSA Private Key and CSR pair.
-> OPENSSL REQ -NEW -NODES -KEYOUT _MYSERVER.KEY_ -OUT _SERVER.CSR_
NOTE: Replace 'myserver.key' and 'server.csr' with names that are more
descriptive to you.
2. Follow Prompts.
NOTE: If you need more information about the prompts then please see
our KB Article on Apache CSR Generation thru OpenSSL
[https://support.comodo.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=3]
All in One Method
> -> openssl req -new -nodes -keyout _myserver....
CSR Generation: cPanel 11
cPanel's SSL/TLS functions are handled by the SSL/TLS Manager module. This area will allow you to generate: SSL certificates, signing requests, and keys. These are all critical parts of using SSL to secure your website.
The first step in generating an SSL certificate is to create a Private Key. Start by reading the instructions in the Private Keys (KEY) section below.
Step 1: Private Keys (KEY)
Click on the Generate, view, upload, or delete your private ...
CSR GENERATION: MICROSOFT OFFICE COMMUNICATIONS SERVER 2007
1. Click Start -> Programs -> Administrative Tools -> Office
Communications Server 2007
2. Expand the items in the snap-in until you get to the Enterprise
Edition Server that you installed.
3. Right-click on the correct server name and select "Certificates".
Click next to get the Certificate Wizard welcome screen.
4. Select "Create a new Certificate" and click Next.
5. Select "Prepare the request now, but send it later" and click ...
Step 1 In the Identity Certificates panel, click the Add button.
Step 2 In the Add Identity Certificate panel, select Add a new identity certificate.
Step 3 Optionally, change the key pair or create a new key pair. A key pair is required.
Step 4 Enter the Certificate Subject DN: information and click the Select... button.
Step 5 In the Certificate Subject DN panel, be sure to specify all of the subject DN attributes required by the CA involved. See Certificate Subject DN Attributes. ...
Exchange 2010 CSR using Exchange Shell
Be advised: You may copy and paste the below commands into your favorite text editor such as Notepad or Notepad++ in order to customize them to suite your needs. We provide them only to show the structure of the New-ExchangeCertificate command (cmdlet).
Method #1: Output to the Screen
Open Exchange Management Shell
Run the following command:
-> New-ExchangeCertificate -GenerateRequest -SubjectName "C=GB, O=Comodo, cn=owa.comodo.com" -KeySize 2...
CREATING A CSR WITH THE EXCHANGE 2010 CERTIFICATE WIZARD
* Start the Exchange Management Console by going to START > PROGRAMS
> MICROSOFT EXCHANGE 2010 > EXCHANGE MANAGEMENT CONSOLE.
* Click the link to MANAGE DATABASES.
* Select SERVER CONFIGURATION in the menu on the left and then NEW
EXCHANGE CERTIFICATE from the actions menu on the right.
* When prompted for a friendly name, use a name to your liking. The
name _will not_ affect your request.
* Under Domain Scope, you can check the ...
A terminal server will NOT have IIS installed so use:
CSR Generation: Using certreq (Windows)
[https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/813/0/csr-generation-using-certreq-windows]to
generate the keys.
Note: Terminal Server will not use a chain with more than one
intermediate certificate so the certificate has to be issued off of
the AddTrust->UTN chain.
Once installed via certreq
[https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/814/0...
CSR Generation: f5 BIG-IP v9.x
Launch the f5 BIG-IP web GUI.
Under Local Traffic select SSL Certificates then Create.
Under General Properties give your certificate a name.(ex.: ComodoSSL, Comodo Wildcard SSL, Comodo Unified Comm. Cert, etc.)
Note: This name will be used in the future to identify this certificate.
Under Certificate Properties enter the following information:
Issuer: Comodo
Common Name: Fully Qualified Domain Name (FQDN) of the server.
Example: domain.com, ...
How to generate a CSR for Microsoft Office Communications
Server 2007
After you have installed Office Communications Server 2007
(OCS) click Start -> Programs -> Administrative Tools ->
Office Communications Server 2007
Expand the items in the snap-in until you get to the
Enterprise Edition Server that you installed.
Right-click on the correct server name and select
"Certificates". Click next to get past the Certificate
Wizar...
HOW TO GENERATE A CSR FOR MICROSOFT OFFICE COMMUNICATIONS SERVER 2007
*
After you have installed Office Communications Server 2007 (OCS) click
Start -> Programs -> Administrative Tools -> Office Communications
Server 2007
*
Expand the items in the snap-in until you get to the Enterprise
Edition Server that you installed.
*
Right-click on the correct server name and select "Certificates".
Click next to get past the Certificate Wizard welcome screen.
*
Choose to "Create a new Cer...
CSR Generation Instructions - Cisco ACS 4.2
Generate a Key Pair and Certificate Signing Request
1) In the navigation bar, click System Configuration.
2) Click ACS Certificate Setup.
3) Click Generate Certificate Signing Request. Cisco Secure ACS displays the Generate new request table on the Generate Certificate Signing Request page. Fill out all of the requested fields.
4) In the Certificate subject box, type the values required by the CA you will submit the CSR to. Cisco Secure ...
Citrix Access Gateway CSR creation is done through the "Certificate Request Generator" of the "Administration Tool."
1. In the "Administration Tool," select the "Access Gateway Cluster" tab and then open the window for the appliance.
2. In the "Certificate Signing Request" tab, enter your company's information as requested.
The "Access Gateway FQDN" field should be the fully-qualified domain name through which your server is accessed externally, or should begin with...
Certificate Signing Request (CSR) Generation - Nortel SSL Accelerator
To generate a CSR, you will need to create a key pair for your
server. These two items are a digital certificate key pair and cannot
be separated. If you lose your public/private key file or your
password and generate a new one, your SSL Certificate will no longer
match. You will have to request a new SSL Certificate and may be
charged.
The CSR needs to contain the following attributes:
- Country Name (C): Use the two-le...
THIS ARTICLE IS FOR ADMINISTRATORS WHO PREFER THE COMMAND SHELL!
Save the following file as REQUEST.INF on your server editing the
subject according to the comment:
> ;----------------- request.inf -----------------
>
> [Version]
> Signature="$Windows NT$"
>
> [NewRequest]
> Subject = "C=US, CN=something.example.com"
>
> KeySpec = 1
> KeyLength = 2048
> Exportable = TRUE
> MachineKeySet = TRUE
> SMIME = False
> PrivateKeyArchive = FALSE
> UserProtected = FALSE
> UseExistingKeySet = FALSE
...
CSR Generation for GLASSFISH:
Newly created domains on glassfish has already a self signed certificate in DOMAIN_DIR/config/keystore.jks file. By default this keystore has default password of “changeit”. This certificate is named as s1as. To see this certificate you could issue following command:
keytool -list -keystore keystore.jks
When asked enter default password “changeit”. You will see a similar output to following:
Keystore type: JKS
Keystore provider: SUN
Your keystore con...
Generating a Certificate Signing Request (CSR) using IBM HTTP Server
Firstly, you must create a new key database. Start the 'IKEYMAN' software - either by running the command 'IKEYMAN' or loading the GUI version.
Select 'Key Database File' from the main menu and choose 'New'.
Choose and enter a new Key Database name. Click 'OK'.
Now enter and confirm a password for the Key Database. Please ensure not to forget this password.
Now we need to use the new Key Database to create a CSR...
This document provides instructions for generating a Certificate
Signing Request (CSR) for Stronghold. If you are not able to use these
instructions for your server, COMODO recommends you to contact the
server vendor or the organization, which supports Stronghold.
NOTE: To generate a CSR, you will need to create a key pair for your
server. These two items are a digital certificate key pair and cannot
be separated. If you lose your public/private key file or your
password and generate a new one...
MICROSOFT SERVERS: CREATE ECC CSR AND INSTALL ECC SSL CERTIFICATE
Before generating an ECC CSR (Elliptic Curve Cryptography Certificate
Signing Request) and ordering an ECC SSL Certificate form COMODO, make
sure that your environment is compatible with ECC SSL Certificates.
For more information about Elliptic Curve Cryptography, see Elliptic
Curve Cryptography ECC Explained
[https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/1105/0/what-is-eliptic-curve-cryptography-ecc].
...
CSR GENERATION : CISCO IRONPORT
Connect to Network/Certificates in Cluster mode and click on "Add
Certificates".
Select "Create Self-Signed Certificate" and fill the fields indicated
Country Name (2 letter code) [AU]: GB
State or Province Name (full name) [Some-State]: YORKS
Locality Name (eg, city) []: YORK
Organization Name (eg, company) [Internet Widgits Pty Ltd]: MYCOMPANY
LTD
Organizational Unit Name (eg, section) []: IT
Common Name (eg, YOUR name) []: MYSUBDOMAIN.MYDOMAIN.COM
Email A...
If you already have your SSL Certificate and just need to install it,
see IIS 8 and IIS 8.5 SSL Certificate Installation
[https://support.comodo.com/index.php?/Knowledgebase/Article/View/1159/0/certificate-installation-microsoft-iis-8x].
HOW TO CREATE A CSR ON WINDOWS SERVER 2012 - IIS 8 AND WINDOWS SERVER
2012 R2 - IIS 8.5
*
From the Start screen, click or search for INTERNET INFORMATION
SERVICES (IIS) MANAGER and open it.
*
Click on the server name.
*
From the center menu, d...
This article uses an ASA 5510 that runs software version 8.0(2) and
ASDM version 6.0(2) and provides instructions for generating a
Certificate Signing Request (CSR) for Cisco ASA 5510.
NOTE: To generate a CSR, you will need to create a key pair for your
server. These two items are a digital certificate key pair and cannot
be separated. If you lose your public/private key file or your
password and generate a new one, your SSL Certificate will no longer
match.
To generate a certificate signing r...
To generate a Certificate Signing Request (CSR) for FortiGate SSL VPN
you will need to create a key pair for your server the public key and
private key.
The CSR need to be provided to a Certificate Authority (CA) for
signing and the private key will remain hidden on the FortiGate system
where the CSR request is made.
To generate a CSR for FortiGate SSL VPN perform the following.
STEP 1: GENERATING YOUR CSR REQUEST:
* Open your FortiGate Management console.
* Click VPN.
* Click Cert...
Help Desk Software by Kayako
© 2018 Comodo Security Solutions, Inc. All rights reserved.
© 2018 Comodo Security Solutions, Inc. All rights reserved.