Creating a CSR file

To create a certificate request file based on a CSR:

1. In the application web interface window, select the Settings → General → Web interface certificates section.
2. Under Custom certificates, click Create.
3. This opens a window; in that window, under Certificate type, select CSR-based.
4. Under Parameters, in the Common name field, enter the domain name of the server for which the certificate is being generated.

   The common name can contain 1 to 64 UTF-8 characters except ! <> ~ @ # $ % ^ * / \ ( ) ? , & =.

5. In the Organization field, enter the name of the organization.

   The organization name can contain 1 to 64 UTF-8 characters except ! <> ~ @ # $ % ^ * / \ ( ) ? . , &.

6. In the FQDN field, specify a list of server FQDNs.

   Specify the FQDNs of all cluster nodes to verify the certificate. The specified FQDNs will be added to the Subject Alternative Name (SAN) attribute of the certificate. If the cluster composition changes or the FQDNs of cluster nodes change, you may need to recreate the certificate with an up-to-date list of FQDNs.

   This field is optional.

7. Click Create.

   The CSR is generated. KSMG generates a private key using the RSA encryption algorithm with a 4096-bit key length.

   The certificate table displays information about the generated CSR.

8. This opens a window; in that window, click Export CSR file.

The CSR file is downloaded to your browser's downloads folder.

You can use the received CSR file to generate a certificate at the certification authority.

Page top