SSL Certificates

SSL Certs, SSL Certificate, SSL Certificates

Securing Your Online Business

Netscape Enterprise Server 3.6x Support

During the online enrollment process you will be required to provide Entrust Certificate Services with a Certificate Signing Request (CSR).

This encrypted data is generated from your Web Server, and contains information about your company and Web server.

! It is important to review this guideline, as Entrust Certificate Services will use this information to generate your certificate.

To generate your Key Pair and Certificate Signing Request (CSR):

  1. Launch the sec-key utility to create your Private Key:
    • Select Start > Run.
    • Provide the full path to the sec-key utility. By default, this utility is found in c:\netscape\suitespot\bin\admin\admin\bin\sec-key.
  2. Select 'OK' to continue.
  3. Supply an Alias by which to reference your key-pair.
  4. Select 'OK' to continue.
  5. Select 'OK' to continue.
  6. Move your mouse around the screen to complete the Random Number Seed Generator
  7. Supply a password for your new key-pair.
  8. Select 'OK' to continue

    ! It is very important that you remember this password. If you forget it you will not be able to gain access to your Private Key.
  9. Supply your password again for verification.
  10. Select 'OK' to continue
  11. Select 'OK' to complete the creation of your new key-pair.
  12. Launch the Administration HTML interface to generate your Certificate Signing Request (CSR):
    • Select Start > Programs > Netscape SuiteSpot > Administration
    • Select 'Keys and Certificates'
  13. Select 'Request Certificate' from the menu options available in the left frame.
  14. Select the 'New Certificate' radio button.
  15. Select the 'CA Email address' radio button, and supply your own email address in the space provided.
  16. Select the key file that contains the public key you wish to include in the certificate from the Alias drop-down list.
  17. Supply the password for your key file in the space provided.
  18. Supply your name, telephone number, and email address in the spaces provided.

    ! If the Web server name does not match the common name in the certificate, some browsers will refuse to establish a secure connection with your site.

    ! Do not specify the protocol (http://), any port numbers or pathnames in the Common Name (CN).

    ! Do not use wildcards such as * or ?.

  19. Enter the distinguished name (DN) of your server, keeping the following example in mind:
    "CN" - Common Name = www.entrust.net (this is the URL of your website)
    "O" - Organization = Entrust, Inc.
    "OU" - Organizational Unit = Entrust Certificate Services
    "L" - Locality = Ottawa
    "St" - State/Province = Ontario
    "C" - Country/Region = CA
  20. Select 'OK' once you have entered the necessary information.
  21. Copy the Certificate Signing Request (including the "-----BEGIN NEW CERTIFICATE REQUEST-----" and "-----END NEW CERTIFICATE REQUEST-----" lines) and paste into a text document for later retrieval.

You have successfully created your Private Key and Certificate Signing Request (CSR).