Creating a Key Pair

1. At the command line, type
   cd \bin\admin\admin\bin
2. Type sec-key at the command prompt. A Netscape key-pair file generation window appears.
3. Enter an alias name for the key-pair file. The alias name should not contain white space.
4. Type OK. Follow the instructions for randomness and then click OK.
5. Enter a password.
   Warning: If you lose the password, you must purchase another certificate.
6. See the certificate replacement policy below.
7. Return to the Keys and Certificates menu in the Netscape Suitespot Server administration page.

Creating a Certificate Signing Request

1. Start the Netscape administration page.
2. Login as the administrator.
3. Click on Keys and Certificates on the administration main menu.
4. Select Request a Certificate on the navigation window.
5. Click on New Certificate in the Request a Server Certificate window.
6. Select CA URL (enter anything in the box).
7. Select the alias that you generated in the key-pair file.
8. When creating a CSR you must follow these conventions.
   Enter the Distinguished Name Field information.
   Note: The following characters can not be accepted:
   < > ~ ! @ # $ % ^ * / \ ( ) ?
   

   Distinguished Name Field	Explanation	Example
   Requester Name	Your name	John Smith
   Telephone Number	Your phone number	(###) ###-####
   Common Name	The fully qualified domain name for your web server. This must be an exact match.	If you intend to secure the URL https://www.identrust.com/, then your CSR's common name must be www.identrust.com
   E-mail Address	Your e-mail address	abc@trustdst.com
   Organization Name	The exact legal name of your organization. Do not abbreviate your organization name.	IdenTrust Inc.
   Organization Unit	Section of the organization	Marketing
   City or Locality	The city where your organization is legally located.	Salt Lake City
   State or Province Name	The state or province where your organization is legally located. Can not be abbreviated.	Utah
   Zip or Postal Code	The postal code where your organization is legally located.	55555
   Country Name	The two-letter ISO abbreviation for your country	US = United States

9. Click OK when finished. The system will generate a CSR which will start with -----Begin Certificate Request----- and it will end with -----End Certificate Request-----.
10. Save this CSR into a text file. If you are using Windows, you can use Notepad to cut and paste the CSR and then save it.
11. Send the entire certificate request to IdenTrust, including ----BEGIN CERTIFICATE REQUEST---- and ----END CERTIFICATE REQUEST----

Back to Listing