CSR Instructions - IBMHTTP
Follow these instructions to generate a CSR for your Web site. When you have completed
this process, you will have a CSR ready to submit to SSLStar.com in order to be
generated into a SSL Security Certificate.
- Start the key manangement utility:
If WinNT/2000: click start button - IBM HTTP Server - Start Key Management
Utility
If Unix: type /usr/bin/ikeyman& from command line.
- Select Key Database File from the main menu, select New, then CMS key
database file.
- You will be prompted for a password.
Warning: If you forget the password, you must purchase another certificate.
- Enter the location and name for the key database file.
- Select "Personal Certificate Request" from the pull-down list in the middle of the
application window.
- Ensure you select Base64 format as the format and NOT UTF-8(Unicode)
- Select New. You should choose 1024 for the key size.
- Select the stash option to save the password in a .sth file
- When creating a CSR you must follow these conventions. Complete the following
Distinguished Name Field information.
The following characters can not be accepted: < > ~ ! @ # $ % ^ * / \ ( )
? & , .
- Specify the name and location for the request file (CSR).
- Submit your CSR to SSLStar by completing the online enrollment process.
|
Distinguished Name Fields
|
Explanation
|
Example
|
|
Country Name
|
The two-letter ISO abbreviation for your country.
|
US = United States
|
|
State or Province Name
|
The state or province where your organization is located. Can not be abbreviated.
|
Georgia
|
|
City or Locality
|
The city where your organization is located.
|
Atlanta
|
|
Company (Organization) Name
|
The exact legal name of your organization. Do not abbreviate your organization name.
|
My Company, Inc
|
|
Organizational Unit
|
Optional for additional organizational information.
|
Marketing
|
|
Common Name (Server Host Name)
|
The fully qualified domain name for your web server. You will get a certificate
name check warning if this is not an exact match.
|
If you intend to secure the URL https://secure.mydomain.com, then your CSR's Server
Hostname must be secure.mydomain.com
|
|
Server Administration email address (if applicable)
|
Your email address
|
abc@mydomain.com
|
»
Return to CSR Instruction List
» Go To Install Instructions