1. Use the cd command to move to the /etc/httpd/conf directory.

 

2. As root, type in one of the following three commands to generate your key:

 

A. If you're using Official Red Hat Linux Professional and you want to use the included password feature, type in the following command:

 

Your key will be generated and you will be asked to enter and confirm a password. Your password should be at least eight characters, should include numbers or punctuation and should not be a word in a dictionary. Also, remember that your password is case sensitive.

 

Please note that you will need to remember and enter this password every time you start your secure Web server, so don't forget it.

 

B. If you're using Official Red Hat Linux Professional and you don't want to be required to type in a password every time you start your secure Web server, type the following command, all on one line,  instead of "make genkey" to create your key:

 

            /usr/sbin/sslgenrsa -rand /dev/urandom -out ssl.key/server.key 1024

            Then use the following command to set the correct permissions on your key:

            chmod go-rwx ssl.key/server.key

 

If you use the above commands to create your key, you will not need to use a password to start your secure Web server. However, we don't recommend that you disable the password feature for your secure Web server, since it decreases the level of security for your server.

 

C. If you're using Official Red Hat Linux Professional International Edition, type in the following single command, all on one line:

 

 You will not be required to enter a password if you're using Official Red Hat Linux Professional International Edition.

3. Your key will be created and saved to a file named server.key.

 

If you're using Official Red Hat Linux Professional, server.key will be located in the /etc/httpd/conf/ssl.key directory.

 

If you're using Official Red Hat Linux Professional International Edition, server.key will be located in /etc/httpd/conf.

The server.key file should be owned by root and should not be accessible to any other user. Make a backup copy of this file and keep the backup copy in a safe, secure place. You need the backup copy because if you lose the server.key file after using it to create your CSR and purchase a certificate, your certificate will no longer work and we will not be able to help you. Your only option would be to apply for a new certificate.

 

 

1. In the /etc/httpd/conf directory, become root and type in one of the following two commands:

 

A. If you're using Official Red Hat Linux Professional, type in the following command: 

 

 

B. If you're using Official Red Hat Linux Professional International Edition, type in the following single command (all on one line): 

 

2. You will be prompted for your password (if you used a password when you generated your key). Type in the password, if necessary.

3. You'll see some instructions and you will be prompted for responses. Your inputs will be incorporated into the CSR.

4. When you've finished entering your information, a file named server.csr will be created. If you're using Official Red Hat Linux Professional, server.csr will be located in the /etc/httpd/conf/ssl.csr directory.

5. You have just created a key pair and a CSR.

6. The server.csr file contains your certificate request. To copy and paste the information into the enrollment form, open the file in a text editor that does not add extra characters (Notepad or Vi are recommended).

 

7. Copy and past the CSR into the enrollment pages on the Global Digital website