This document provides instructions for generating a Certificate Signing Request (CSR) for Sun ONE. If you are unable to use these instructions for your server, Symantec recommends that you contact Sun ONE.
NOTE: To generate a CSR, you first need to create a key pair for your server. These two items are a digital certificate key pair and cannot be separated. If you lose your private key file or your password and generate a new one, your Certificate will no longer match your private key. You will have to replace the SSL certificate.
To generate a key pair and a CSR, perform the steps bellow:
- Open a command prompt and go to the Sun One Webserver admin bin directory (i.e. c:\Sun\WebServer6.1\bin\https\admin\bin)
- Run the following command:
certutil -R -s “CN=www.symantec.com,OU=Department Name,O=Symantec Corporation,L=Mountain View,ST=California,C=US” -a -o mycsr.csr -k rsa -g 2048 -v 12 -d (location of Sun One WebServer directory)\alias -P https-www.symantec.com-www- -Z SHA2
NOTE: Change the value of CN, OU, O, L, ST and C fields appropriately to suit your website and company. Change the value of the -P option to suit the web instance (i.e. c:\Sun\WebServer6.1\alias).
- Country Name (C): Enter the two-character abbreviation of country in which organization resides (e.g. US).
- State or Province (S): Enter the full name of your state or province.
Note: Make sure the State or Province is not abbreviated (e.g. California).
- Locality or City (L): Usually the city of your organization's main office, or a main office for your organization.
- Organization (O): The full legal name of your company.
- Organizational Unit (OU): Use this field to differentiate between divisions within an organization.
- Common Name (CN): The fully-qualified domain name to which your certificate will be issued.
- Verify your CSR
- Proceed with Enrollment
Once the SSL certificate has been issued, follow the steps from this link to install it on the server.