CSR Support

Lotus Domino Go 4.6.2.6 and higher

Creating a Certificate Signing Request

1. Start the MKKF utility by typing mkkf at the command prompt. The system displays a menu page.

*Note: The MKKF utility places the keyring file in the current directory unless otherwise specified.

2. Select N to create a new key ring file, default file name is keyfile.kyr.

After you type in a key ring file name, the next menu screen will come up.

3. Select W to work with keys and certificates.

4. Select C to create a new key and certificate request. Type a password when prompted.

Warning: If you lose the password, you must purchase another certificate.

5. Select P to choose PKCS#10 certificate request format at the next menu.

6. Select M to modify the certificate request fields at the next menu.

The following characters are not accepted: < > ~ ! @ # $ % ^ * / \ ( ) &.  

Distinguished Name Field

Explanation

Example

Country Name

The two-letter ISO abbreviation for your country

US = United States

State or Province Name

The state or province where your organization is located. It cannot be abbreviated.

Georgia

City or Locality

The city where your organization is located.

Atlanta

Organization Name

The exact legal name of your organization. Do not abbreviate

IPS S.L.

Organizational Unit

Optional for additional organization information

Marketing

Common Name (Server Host Name)

The fully qualified domain name for your web server. You will get a certificate name check warning if this is not an exact match.

If you intend to secure the URL https://secure.yourURL.com, then your CSR's Server Hostname must be secure.yourURL.com

Server Admin.'s email address

Your email address

abc@yourURL.com

7. Select R to create the key and certificate request after specifing all fields.

8. After the key and certificate request are created, select X to exit from MKKF utility. Save the changes to the key-ring file.

*Make a backup copy of your keyring file and store it in a safe place.

9. Submit your CSR to IPSCA.