CSR Support

iPlanet Enterprise Server 4.1

Creating a Certificate Signing Request

1. Start your iPlanet Enterprise web server.

2. Open the iPlanet Netscape administration page.

3. Log in as the administrator.

4. Click on Security.

5. Select Create Database.

6. Type in Database Password. Confirm Password. Click OK.

Warning: If you lose the password, you must purchase another certificate.

7. Click on Request a Certificate.

8. Select New Certificate.

9. Select CA URL (enter www.ipsca.com in the box).

10. Enter your key pair file password.

11. When creating a CSR you must follow these conventions.

Type in the Distinguished Name Field information.

The following characters can not be accepted: < > ~ ! @ # $ % ^ * / \ ( ) ?
 

Distinguished Name Field

Explanation

Example

Requester Name

Your Name

John Doe

Telephone Number

Your Telephone Number

(xxx) xxx-xxxx

Common Name (Server Host Name)

The fully qualified domain name for your web server. You will get a certificate name check warning if this is not an exact match.

If you intend to secure the URL https://secure.yourURL.com, then your CSR's Server Hostname must be secure.yourURL.com

Server Admin.'s email address

Your email address

abc@yourURL.com

Organization Name

The exact legal name of your organization. Do not abbreviate

IPS S.L.

Organizational Unit

Optional for additional organization information

Marketing

City or Locality

The city where your organization is located.

Atlanta

State or Province Name

The state or province where your organization is located. Can not be abbreviated.

Georgia

Country Name

The two-letter ISO abbreviation for your country

US = United States

12. Click OK when finished.

13. Enter Certificate Request Information

14. The system will generate a CSR in PKCS #10 format which will start with "-----Begin Certificate Request-----" andit will end with "-----End Certificate Request-----".

15. Save this CSR into a text file. If you are using Windows or NT, you can use Notepad to cut and paste the CSR and then save it.

Backing up your key pair file

A key-pair file contains both the public and private keys used for SSL encryption. You will use the key-pair file when you request and install a certificate. The key-pair file is stored encrypted in the following directory: server_root/alias/<serverid-hostname>-key3.db.

When you create the key, you specify a password that you later use when you request the certificate and when you start a server that is using encrypted communications.

Creating the certificate trust database

1. Access the Administration Server and choose the Security tab.
2. Type the password in Database Password.
3. Re-type the password in Password.
4. Click OK.