CSR Support

Zeus Web Server v3

Note: The following assumes you have already created a virtual web to be SSL-enabled. Please refer to the ZEUS documentation "Security Configuration / Enabling SSL" located at:

http://www.zeus.co.uk/extra/docsystem/

Creating a Certificate Signing Request

1. Select the Web icon from the Admin Server control panel.

2. Select SSL Configuration. On the Edit Server panel, choose SSL ON to enable SSL.
   
3. Select SSL Quick Setup to begin creating your Private Key and Certificate Signing Request (CSR).

4. Enter the full path for your Private Key file under Generate Your Private Key, select key size (e.g., 1024).

5. Enter the Distinguished Name Field information under Create a Certificate Request. When creating a CSR you must follow these conventions.

The following characters can not be accepted: < > ~ ! @ # $ % ^ * / \ ( ) ?.  

Distinguished Name Field

Explanation

Example

Common Name (Server Host Name)

The fully qualified domain name for your web server. You will get a certificate name check warning if this is not an exact match.

If you intend to secure the URL https://secure.yourURL.com, then your CSR's Server Hostname must be secure.yourURL.com

Organization Name

The exact legal name of your organization. Do not abbreviate

IPS S.L.

Organizational Unit

Optional for additional organization information

Marketing

City or Locality

The city where your organization is located.

Atlanta

State or Province Name

The state or province where your organization is located. Can not be abbreviated.

Georgia

Country Name

The two-letter ISO abbreviation for your country

US = United States

6. Hit the Setup Server button and check the Verbose box to view progress.

The Private Key information and CSR contents will be presented.

7. Copy this CSR text; be sure to include the line "-----BEGIN NEW CERTIFICATE REQUEST-----"

and everything up to and including the "-----END NEW CERTIFICATE REQUEST-----" lines.

8. Submit your CSR to IPSCA.

Additional instructions can be found on the ZEUS web site:

http://www.zeus.com/extra/docsystem/

Installing your Certificate on Zeus

ipsCA sent you your server Certificate.

After you are emailed your certificate, two other certificates will be necessary to setup your SSL Server, IPS SERVIDORES ROOT CERTIFICATE and the intermediate CA IPSCA CLASEA1. It is essential that these certificates also be installed on your webserver in order to establish correct SSL connections with your customer's browsers. Should they be required, you may download these certificates individually or collectively as a bundled file below:

IPSServidores.crt

IPSCACLASEA1.crt

Open a text editor and then copy the text from each certificate into the text editor to form one file. The certificates should be pasted in the following sequence, your site Certificate named yourdomain.crt, IPSCACLASEA1.crt, IPSSERVIDORES.crt, and the resulting file should look like the following:

-----BEGIN CERTIFICATE-----
(Your Site Certificate Encoded Text)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(IPSCACLASEA1 Encoded Text)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(IPSSERVIDORES Encoded Text)
-----END CERTIFICATE-----

Please note: Make sure you include the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- as displayed above.

1. Login to the web server.

2. Select SSL certificates

3. Select Generate CSR (or Replace Certificate) against the certificate set

4. Copy/Paste the text from the text editor into the Signed Certificate box and click OK.

5. Then select Accept this Certificate

6. The certificate set now needs assigning to the web site. Click on the Home icon. Put a tick in the box next to the virtual server to configure and select configure.

7. Click on SSL Enabled.

8. Enable SSL and select the certificate set to use.

9. Apply and commit the changes then restart the web server.