SSL Certificates

SSL Certs, SSL Certificate, SSL Certificates

Securing Your Online Business

iPlanet 6.x Support

During the online enrollment process you will be required to provide Entrust Certificate Services with a Certificate Signing Request (CSR).

This encrypted data is generated from your Web Server, and contains information about your company and Web server.

! It is important to review this guideline, as Entrust Certificate Services will use this information to generate your certificate.
To generate your Key Pair and Certificate Signing Request (CSR):
  1. Launch the Administration HTML interface:
       Select Start > Programs > iPlanet Web Server > Administer Web Server.
  2. Select the server instance you wish to administer by selecting the correct server name from the drop down list.
  3. Select Manage.
  4. Select the Security tab.
  5. Select 'Create Database' from the menu options available in the left frame.
  6. Supply a password for your new Trust Database.
  7. Supply your password again for verification.
    ! It is very important that you remember this password. If you forget it you will not be able to gain access to your Private Key.
  8. Select 'OK' to continue
  9. Select 'OK' to complete Trust Database creation.
  10. Select 'Request a Certificate' from the menu options available in the left frame to generate your Certificate Signing Request.
  11. Select the 'New Certificate' radio button.
  12. Select the 'CA Email address' radio button, and supply your own email address in the space provided.
  13. Supply the password for your Key pair File in the space provided.
  14. Supply your name, telephone number, and email address in the spaces provided.

    ! If the Web server name does not match the common name in the certificate, some browsers will refuse to establish a secure connection with your site.

    ! Do not specify the protocol (http://), any port numbers or pathnames in the Common Name (CN).

    ! Do not use wildcards such as * or ?.

  15. Enter the distinguished name (DN) of your server, keeping the following example in mind:
    "CN" - Common Name = www.entrust.net (this is the URL of your website)
    "O" - Organization = Entrust, Inc.
    "OU" - Organizational Unit = Entrust Certificate Services
    "L" - Locality = Ottawa
    "St" - State/Province = Ontario
    "C" - Country/Region = CA
  16. Select 'OK' once you have entered the necessary information.
  17. Copy the Certificate Signing Request (including the "-----BEGIN NEW CERTIFICATE REQUEST-----" and "-----END NEW CERTIFICATE REQUEST-----" lines) and paste into a text document for later retrieval.

You have successfully created your Private Key and Certificate Signing Request (CSR).