Generate a Certificate Signing Request (CSR)

IBM HTTP Server

Follow these instructions to generate a CSR for your Web site. When you have completed this process, click the "close" button below to close this window and continue to the next step.

  1. Start the key manangement utility:
    If WinNT/2000: click start button - IBM HTTP Server - Start Key Management Utility
    If Unix: type /usr/bin/ikeyman& from command line.
  2. Select Key Database File from the main menu, select New, then CMS key database file.
  3. You will be prompted for a password. Warning: If you forget the password, you must purchase another certificate.
  4. Enter the location and name for the key database file.
  5. Select "Personal Certificate Request" from the pull-down list in the middle of the application window.
  6. Select New. You should choose 2048 for the key size.
  7. Select the stash option to save the password in a .sth file
  8. When creating a CSR you must follow these conventions. Complete the following Distinguished Name Field information.
    The following characters can not be accepted: < > ~ ! @ # $ % ^ * / \ ( ) ? & , .
  9. Specify the name and location for the request file (CSR).
  10. Submit your CSR to GeoTrust by clicking on <Continue>, you will be asked to complete the agreement and the enrollment form as well.

Distinguished Name Field

Explanation

  Example

Country Name

The two-letter ISO abbreviation for your country.

US = United States

State or Province Name

The state or province where your organization is located. Can not be abbreviated.

Georgia

City or Locality

The city where your organization is located.

Atlanta

Organization Name

The exact legal name of your organization. Do not abbreviate.

GeoTrust Inc.

Organizational Unit

Optional for additional organizational information.

Marketing

Common Name (Server Host Name)

The fully qualified domain name for your web server. You will get a certificate name check warning if this is not an exact match.

If you intend to secure the URL https://secure.geotrust.com, then your CSR's server hostname must be secure.geotrust.com

Server Admin.'s email address

Your email address

abc@geotrust.com

 

[ Close ]