SSL Certificate CSR Generation Instructions

IBM HTTP Server

Follow these instructions to generate a CSR for your Web site. When you have completed this process, you will have a CSR ready to submit to your provider in order to be generated into a SSL Security Certificate.

Note: If you are starting IKEYMAN to create a new key database file, the file is stored in the directory where you start IKEYMAN.

To create a new Key Database:

1. Enter IKEYMAN on a command line on UNIX, or start the Key Management utility in the IBM HTTP Server folder, on Windows.
2. Select Key Database File from the main user interface, select New.
3. In the New dialog box, enter your key database name. Click OK.
4. In the Password Prompt dialog box, enter a password. Click OK.
5. Select the stash option to save the password in a .sth file

Creating a New Key Pair and Certificate Request:

1. Enter IKEYMAN on a command line on UNIX, or start the Key Management utility in the IBM HTTP Server folder on Windows.
2. Select Key Database File, from the main user interface and select Open.
3. In the Open dialog box, select your key database name. Click OK.
4. In the Password Prompt dialog box, enter your correct password and click OK.
5. Select Create from the main user interface, select New Certificate Request. Ensure you create the format in Base64 format and not UTF-8(Unicode)
6. In the New Key and Certificate Request dialog box, enter:

When creating a CSR you must follow these conventions:

• Enter the information to be displayed in the certificate. The following characters can not be accepted: < > ~ ! @ # $ % ^ / \ ( ) ?.,&
• If you are applying for a wildcard certificate you must state * in place of the sub domain, for example *.yourdomain.com instead of www.yourdomain.com

Key Label: a name to identify the key and certificate
Keysize: (1024)
Organization Name: (your company name)
Organization Unit: (your company department)
Locality: (your city)
State/Province: (your state)
Zipcode/Postcode:# (your zipcode)
Country: (Two letter country code, note United Kingdom should be GB)
Certificate request file name, or use the default name

7. Click OK.
8. In the Information dialog box, click OK.
9. Your CSR will now have been created. Open the CSR file in a text editor and copy and paste the contents into the online enrollment form when requested.