Archived - Mac OS X Server v10.6: Generating a Certificate Signing Request
The information in a Mac OS X Server v10.6-generated certificate must be customized before submitting the Certificate Signing Request (CSR) to a certificate authority (CA). Learn how to create a certificate signing request in this article.
Follow these steps to generate the Certificate Signing Request (CSR):
- Open Server Admin.
- Click Certificates in the toolbar.
- Click the Add (+) button and choose Create a Certificate Identity. This opens Certificate Assistant.
- Override the defaults by choosing “Let me override defaults”.
- If needed, make changes for the Serial Number and Validity Period.
- Click Continue.
- In the next pane complete the personal information. Important: The information in this pane is necessary for some Certificate Authorities to consider the CSR properly formatted.
- An email address of the responsible party for certificates
- The name of the issuing authority (you or your organization)
- The organization name
- The organization unit name
- The city or locality
- The state or province (do not abbreviate)
- Country (choose from the pop-up menu)
- Click Continue when finished.
- Continue through the additional panes, accepting the defaults or making changes as desired for your certificate.
- After the last pane, Certificate Assistant will save the Certificate and quit. You will be returned to Server Admin, and the self signed certificate should be displayed in the Certificates pane.
- Select the new certificate.
- Click the Action menu (looks like a gear) and choose Generate Certificate Signing Request (CSR).
- Click Save to save the CSR.
Your Certificate Authority has instructions about how to transfer the CSR to the signer. Some Certificate Authorities require you to use a web interface; others require sending the CSR in the body of a mail message. Follow the instructions given by the Certificate Authority you choose.