SSL 247 are authorised strategic resellers of Verisign,GlobalSign, Geotrust and RapidSSL products

iPlanet Enterprise Server 4.1

Follow these instructions to generate a CSR for your Web site. When you have completed this process, you will have a CSR ready to submit to ssl247.co.uk in order to be generated into a SSL Security Certificate.

1. Start your iPlanet Enterprise web server.
2. Open the iPlanet Netscape administration page.
3. Log in as the administrator
4. Click on Security.
5. Select Create Database (If you have not already created the security database). If no database exists, iPlanet Web Server creates the proper key and certificate database files and stores them in the alias/ directory (otherwise, iPlanet Web Server displays an error message).
6. Type in Database Password. Confirm Password. Click OK.
   
   Warning: If you lose the password, you must purchase another certificate.
   
   See the certificate replacement policy at the bottom of these instructions.
   
   
7. Click on Request a Certificate
8. Select New Certificate.
9. Select CA URL (enter www.ssl247.co.uk in the box). Note: this selection is arbitrary; you will be presented with the resulting CSR in the next window - that's when you cut-and-paste the CSR and save it.
10. Enter your key pair file password.
11. When creating a CSR you must follow these conventions.
    Type in the Distinguished Name Field information.
    The following characters can not be accepted: < > ~ ! @ # $ % ^ * / \ ( ) ?.
    
    

    Distinguished Name Fields	Explanation	Example
    Requester Name	Your Name	John Smith
    Telephone Number	Your phone number	(xxx) xxx-xxxx
    Common Name	The fully qualified domain name for your web server. This must be an exact match.	If you intend to secure the URL https://www.yourdomain.com, then your CSR's common name must be www.yourdomain.com.
    Email address	Your email address	abc@yourdomain.com
    Organization	The exact legal name of your organization. Do not abbreviate your organization name.	Your Company, Inc.
    Organization Unit	Section of the organization	Marketing
    Locality or City	The city where your organization is legally located.	Atlanta
    State/Province	The state or province where your organization is legally located. Can not be abbreviated.	Georgia
    Country	The two-letter ISO abbreviation for your country. Please click here for the enitre list of ISO country codes.	US = United States GB = United Kingdom

    
    
    
12. Click OK when finished.
13. Enter Certificate Request Information:
    
    

    What you see	What you should type
    Operation	Submit CSR
    Certificate Type	Server
    Requester Name	Name
    Requester Email	Email
    Requester Phone	Phone Number
    Requester Comments	(Leave blank)

    
    
    
14. The system will generate a CSR in PKCS #10 format which will start with "-----Begin Certificate Request-----" and it will end with "-----End Certificate Request-----".
15. Save this CSR into a text file. If you are using Windows or NT, you can use Notepad to cut and paste the CSR and then save it.

    You are now ready to submit your CSR for the certificate you wish to install:

    • FreeSSL
    • RapidSSL™
    • RapidSSL Pro™
    • RapidSSL Pro Wildcard™
    • GeoTrust QuickSSL Premium™
    • Geotrust True BusinessID®
    • Geotrust True BusinessID® Wildcard
    • GeoTrust PowerServer ID™
    • GlobalSign Domain ServerSign™
    • GlobalSign Domain ServerSign™ Wildcard
    • GlobalSign Extended ServerSign™
    • GlobalSign Organization ServerSign™
    • GlobalSign Organization ServerSign™ with IP
    • GlobalSign Organization ServerSign™ Wildcard
    • GlobalSign Organization ServerSign™ with SAN
    • VeriSign Secure Site
    • VeriSign Secure Site Pro
    • VeriSign Secure Site Pro with EV

Backing up your key pair file

A key-pair file contains both the public and private keys used for SSL encryption. You will use the key-pair file when you request and install a certificate. The key-pair file is stored encrypted in the following directory: server_root/alias/<serverid-hostname>-key3.db.

When you create the key, you specify a password that you later use when you request the certificate and when you start a server that is using encrypted communications.