SSL Certificates

SSL Certs, SSL Certificate, SSL Certificates

Securing Your Online Business

Novell Netware 6.0 Support

During the online enrollment process you will be required to provide Entrust with a Certificate Signing Request (CSR).

This encrypted data is generated from your web server, and contains information about your company and web server.

! It is important to review this guideline, as Entrust will use this information to generate your certificate.

! If you are renewing your certificate you MUST create a new key pair, you cannot use the existing key pair.

To generate your Key Pair and Certificate Signing Request (CSR) :

  1. Launch Console One
  2. Right click the container where your server resides
  3. Select New, then select Object
  4. From the 'New Object' window, select NDSPKI : Key Material
  5. Click OK
  6. From the 'Create Server Certificate (Key Material)' window, select the server you are requesting the certificate for
  7. Ensure the 'Custom' creation method radio button is selected
  8. Click Next
  9. Ensure the 'External certificate authority' radio button is selected
  10. Click Next
  11. Select a key size
  12. ! Entrust does not supporting signing CSR's with a key length greater than 2048, please choose a length equal to or less than 2048.
  13. Ensure "Allow private key to be exported" is checked - setting this option will allow you to backup your key pair at a later stage
  14. Click Next
  15. Click the 'Edit' button located next to the 'Subject name' field
  16. Ensure that the subject name reflects the name of the URL you are requesting the certificate for. Entrust requires that the subject name contains at least 3 components :
    • CN - common name
    • O - Orgranization
    • C - Country
  17. ! Do not use the following characters in any of the fields in the 'Create Server Certificate (Key Material)' window: > < ! @ # $ % ^ * ( ) ~ ? / \.

    ! Do not specify the protocol (http://), any port numbers or pathnames in the Common Name (CN).

    ! Do not use wildcards such as * or ?.

  18. Click OK once you have properly configured the Subject Name
  19. Click Next
  20. In the window that appears, review the components you have specified to be used in the creation of your CSR, click Finish when done.
  21. Select the 'File in Base64 format' radio button, and specify a path and filename for your CSR.
  22. Click Save to complete generation of your CSR.

You have successfully created your key pair and Certificate Signing Request.