How do I generate a CSR and install my certificate using Juniper Netscreen OS? — Technote Article

Entrust Certificate Services Support Knowledge Base

Audience: General
Last Modified: 2010-03-04 11:15:04.0

TN 7787 - How do I generate a CSR and install my certificate using Juniper Netscreen OS?

Question:

How do I generate a CSR and install my certificate using Juniper Netscreen ?

Answer:

Before generating the CSR, you must ensure your clock is synchronized.

To ensure your clock is synchronized

1. Connect to the Netscreen interface.
2. Select Options > Configurations > Date/Time.
3. Click Synch Clock with Client.
4. Set Automatically adjust clock for daylight savings changes to Yes.
5. Under Options > Network > DNS, specify the host name (device host name) and the domain name (fully qualified domain name).

6. Click Apply.

7. Click Options > Objects > Certificates.

8. Click New and complete the required fields for the CSR:

Common name: Enter the domain that is to be secured on the certificate. This is usually a fully qualified domain name (e.g. mydomain.com).
Organization: Enter the legal business name of the organization.
Country/Region: Select your country/Region.

To install your Entrust certificate:

1. Go to the Web interface.
2. Click Options > Object > Certificate.

3. Select Load a Cert.

4. Select Local from the Show drop-down list.

5. Browse to the location you stored your Entrust Certificate and click Load (file should be in.cer format).

To install the Entrust L1C Intermediate Chain Certificate and 2048 bit Root Certificate

Note: You must install both of these certificates:

Entrust 2048 Root - https://www.entrust.net/downloads/binary/entrust_2048_ca.cer

Entrust L1C Intermediate - https://www.entrust.net/downloads/binary/entrust_l1c.cer

1. Select CA from the Show drop-down list.

2. Browse to the Entrust L1C Intermediate Chain Certificate and click Load.

3. Select CA again from the Show drop-down list.
4. Browse to the Entrust 2048 bit Root Certificate and click Load.

Affected Products:

Entrust Certificate Services 1 Year Advantage SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable

SSL Certificates

EV Multi-Domain SSL

Advantage SSL

Standard SSL

UC Multi-Domain SSL

Adobe CDS

Code Signing Certificates

Secure Email Certificates