Ask a Question

Advanced Search

Alert ID : INFO806

Last Modified : 04/23/2019

Managed PKI for SSL - Certificate Signing Request (CSR) Generation Instructions for Sun ONE 6.1


This document provides instructions for generating a Certificate Signing Request (CSR) for Sun ONE. If you are unable to use these instructions for your server, Symantec recommends that you contact Sun ONE.
NOTE: To generate a CSR, you first need to create a key pair for your server. These two items are a digital certificate key pair and cannot be separated. If you lose your private key file or your password and generate a new one, your Certificate will no longer match your private key. You will have to replace the SSL certificate.

To generate a key pair and a CSR, perform the steps bellow:

  1. Open a command prompt and go to the Sun One Webserver admin bin directory (i.e. c:\Sun\WebServer6.1\bin\https\admin\bin)
  2. Run the following command:

    certutil -R -s “,OU=Department Name,O=Symantec Corporation,L=Mountain View,ST=California,C=US” -a -o mycsr.csr -k rsa -g 2048 -v 12 -d (location of Sun One WebServer directory)\alias -P -Z SHA2

    NOTE: Change the value of CN, OU, O, L, ST and C fields appropriately to suit your website and company. Change the value of the -P option to suit the web instance (i.e. c:\Sun\WebServer6.1\alias).
  • Country Name (C): Enter the two-character abbreviation of country in which organization resides (e.g. US).
  • State or Province (S): Enter the full name of your state or province.
    Note: Make sure the State or Province is not abbreviated (e.g. California).
  • Locality or City (L): Usually the city of your organization's main office, or a main office for your organization.
  • Organization (O): The full legal name of your company.
  • Organizational Unit (OU): Use this field to differentiate between divisions within an organization.
  • Common Name (CN): The fully-qualified domain name to which your certificate will be issued.
  1. Verify your CSR
  2. Proceed with Enrollment

Once the SSL certificate has been issued, follow the steps from this link to install it on the server.