To generate a CSR, you will need to create a key pair for your server. These two items are a digital certificate key pair and cannot be separated. If you lose your public/private key file or your password and generate a new one, your SSL Certificate will no longer match. You will have to request a new SSL Certificate and may be charged.
Generate a Private Key and CSR
- Create a directory called ‘C:\test’.
- Launch “OpenSSL”.
- Enter ‘genrsa -des3 -out c:\test\key.pem 1024’ to create a private key.
- Enter in a passphrase to protect the key (at least six characters).
- Enter the following command to create a certificate request: ‘req –new –key c:\test\key.pem –out c:\test\req.pem –config openssl_config.txt
- Enter in all the required fields for the certificate you want to generate
- You have just created a key pair and a CSR.
- To copy and paste the information into the enrollment form, open the file in a text editor that does not add extra characters (Notepad or Vi are recommended).
- Copy and paste the CSR into the enrollment pages on the Global Digital website