Step 1: Complete and submit a CSR

You must first generate a certificate signing request (CSR) file and send it to the CA.

This task describes how to generate the CSR file that you send to a CA to receive signed, management certificates for the system hosting SAN Manager and the Web Services Proxy. You must provide information about your organization, plus the IP address or DNS name of the host system.
CAUTION:
Do not generate a new CSR after submission to the CA. When you generate a CSR, the system creates a private and public key pair. The public key is part of the CSR, while the private key is kept in the keystore. When you receive the signed certificates and import them into the keystore, the system ensures that both the private and public keys are the original pair. Therefore, you must not generate a new CSR after submitting one to the CA. If you do, the controllers generate new keys, and the certificates you receive from the CA will not work.
  1. Select Certificate Management .
  2. From the Management tab, select Complete CSR.
  3. Enter the following information, and then click Next:
    • Organization – The full, legal name of your company or organization. Include suffixes, such as Inc. or Corp.
    • Organizational unit (optional) – The division of your organization that is handling the certificate.
    • City/Locality – The city where your host system or business is located.
    • State/Region (optional) – The state or region where your host system or business is located.
    • Country ISO code – Your country's two-digit ISO (International Organization for Standardization) code, such as US.
  4. Enter the following information about the host system:
    • Common name – The IP address or DNS name of the host system where the Web Services Proxy is installed. Make sure this address is correct; it must match exactly what you enter to access SAN Manager in the browser. Do not include http:// or https://.
    • Alternate IP addresses – If the common name is an IP address, you can optionally enter any additional IP addresses or aliases for the host system. For multiple entries, use a comma-delimited format.
    • Alternate DNS names – If the common name is a DNS name, enter any additional DNS names for the host system. For multiple entries, use a comma-delimited format. If there are no alternate DNS names, but you entered a DNS name in the first field, copy that name here.
  5. Click Finish.
    A CSR file is downloaded to your local system. The folder location of the download depends on your browser.
  6. Submit the CSR file to a CA and request signed certificates in PEM or DER format.

Wait for the CA to return the certificate files, and then go to Step 2: Import management certificates.

Parent topic: How tos