iPlanet 6.x Support
During the online enrollment process you will be required to provide Entrust Certificate Services with a Certificate Signing Request (CSR).
This encrypted data is generated from your Web Server, and contains information about your company and Web server.
! It is important to review this guideline, as Entrust Certificate Services will use this information to generate your certificate.To generate your Key Pair and Certificate Signing Request (CSR):
- Launch the Administration HTML interface:
Select Start > Programs > iPlanet Web Server > Administer Web Server. - Select the server instance you wish to administer by selecting the correct server name from the drop down list.
- Select Manage.
- Select the Security tab.
- Select 'Create Database' from the menu options available in the left frame.
- Supply a password for your new Trust Database.
- Supply your password again for verification.
! It is very important that you remember this password. If you forget it you will not be able to gain access to your Private Key.
- Select 'OK' to continue
- Select 'OK' to complete Trust Database creation.
- Select 'Request a Certificate' from the menu options available in the left frame to generate your Certificate Signing Request.
- Select the 'New Certificate' radio button.
- Select the 'CA Email address' radio button, and supply your own email address in the space provided.
- Supply the password for your Key pair File in the space provided.
- Supply your name, telephone number, and email address in the spaces provided.
! If the Web server name does not match the common name in the certificate, some browsers will refuse to establish a secure connection with your site.
! Do not specify the protocol (http://), any port numbers or pathnames in the Common Name (CN).
! Do not use wildcards such as * or ?.
- Enter the distinguished name (DN) of your server, keeping the following example in mind:
"CN" - Common Name = www.entrust.net (this is the URL of your website)
"O" - Organization = Entrust, Inc.
"OU" - Organizational Unit = Entrust Certificate Services
"L" - Locality = Ottawa
"St" - State/Province = Ontario
"C" - Country/Region = CA - Select 'OK' once you have entered the necessary information.
- Copy the Certificate Signing Request (including the "-----BEGIN NEW CERTIFICATE REQUEST-----" and "-----END NEW CERTIFICATE REQUEST-----" lines) and paste into a text document for later retrieval.
You have successfully created your Private Key and Certificate Signing Request (CSR).
![[Certification Authorities - Webtrust - Deloitte]](/images/cert_services/deloitte_seal_sm.jpg)