Creating a CSR

Please refer to the Cobalt user guides available at http://www.sun.com/hardware/serverappliances/documentation/manuals.html for full instructions on creating a CSR.

A CSR is a file containing your certificate application information, including your Public Key. Generate your CSR and then copy and paste the CSR file into the webform in the enrollment process.

C I Host InstantSSL Certificates are compatible with all webserver software. If your webserver software does not appear on the above list, please contact support@cihost.com with full details of your webserver software and we will contact you with further instructions.

Login to the Site Administrator or Appliance Administrator and select the site to administer.

Select Services

Select the Actions box next to Apache Web Server and then select SSL Settings

Select Generate and fill in the required details, the site name will automatically be entered into the Common Name field, ensure this is correct and contains the Fully Qualified Domain Name (e.g. secure.ciihost.com, www.cihost.com, support.cihost.com)

Select Save and you are presented with the RSA Key and the Certificate Request (CSR)

Copy the Certificate Request into a text editor; this will be required when you purchase your certificate.

Do not delete this request, as it will be needed during the installation of your SSL certificate

C I Host InstantSSL Certificates are compatible with all webserver software. If your webserver software does not appear on the above list, please contact support@cihost.com with full details of your webserver software and we will contact you with further instructions.

A CSR is a file containing your certificate application information, including your Public Key. Generate your CSR and then copy and paste the CSR file into the webform in the enrollment process:

Generate keys and certificate:

• Open the Microsoft Management Console (MMC) for IIS (available in the Windows NT 4.0 Option Pack > Microsoft Internet Information Server > Internet Service Manager.
• In the MMC, Expand the Internet Information Server folder and expand the computer name
• Open the properties window for the website the CSR is for. You can do this by right clicking on the website
• Open Directory Security Folder
• In the Secure Communications area of this Property Sheet, select the Key Manager button and select "Create New Key..."
• Choose "Put the request in a file that you will send to an authority." Select an appropriate filename (or accept the default).
• Fill in the appropriate details:
• Fill in all the fields, do not use the following characters: ! @ # $ % ^ * ( ) ~ ? > < & / \ note: If your server is 40 bit enabled, you will generate a 512 bit key If your server is 128 bit you can generate up to 1024 bit keys
• Click Next until you finish
• Click Finish
• Key Manager will display a key icon under the WWW icon. The key will have an orange slash through it indicating it is not complete. Choose the "Computers" menu and select Exit. Select YES when asked to commit changes
• When you make your application, make sure you include this file (this is your CSR) in its entirety into the appropriate section of the enrollment form - including -----BEGIN CERTIFICATE REQUEST-----to-----END CERTIFICATE REQUEST-----
• Click Next
• Confirm your details in the enrollment form
• Finish

We recommend that you make a note of your password and backup your key as these are known only to you, so if you loose them we can't help! A floppy diskette or other removable media is recommended for your backup files.

C I Host InstantSSL Certificates are compatible with all webserver software. If your webserver software does not appear on the above list, please contact support@cihost.com with full details of your webserver software and we will contact you with further instructions.

A CSR is a file containing your certificate application information, including your Public Key. Generate your CSR and then copy and paste the CSR file into the webform in the enrollment process:

Generate keys and Certificate Signing Request:

• Select Administrative Tools
• Start Internet Services Manager
• Open the properties window for the website the CSR is for. You can do this by right clicking on the Default Website and selecting Properties from the menu
• Open Directory Security by right clicking on the Directory Security tab
• Click Server Certificate. The following Wizard will appear:
• Click Create a new certificate and click Next.
• Select Prepare the request and click Next.
• Provide a name for the certificate; this needs to be easily identifiable if you are working with multiple domains. This is for your records only.
• If your server is 40 bit enabled, you will generate a 512 bit key. If your server is 128 bit you can generate up to 1024 bit keys. SWe recommend you stay with the default of 1024 bit key if the option is available. Click Next
• Enter Organization and Organization Unit; these are your company name and department respectively. Click Next.

The Common Name field should be the Fully Qualified Domain Name (FQDN) or the web address for which you plan to use your Certificate, e.g. the area of your site you wish customers to connect to using SSL. For example, an InstantSSL Certificate issued for cihost.com will not be valid for secure.cihost.com. If the web address to be used for SSL is secure.cihost.com ensure that the common name submitted in the CSR is secure.cihost.com. Click Next.

• Enter your country, state and city. Click Next.
• Enter a filename and location to save your CSR. You will need this CSR to enroll for your Certificate. Click Next.
• Check the details you have entered. If you have made a mistake click Back and amend the details. Be especially sure to check the domain name the Certificate is to be "Issued To". Your Certificate will only work on this domain. Click Next when you are happy the details are absolutely correct.
• When you make your application, make sure you include the CSR in its entirety into the appropriate section of the enrollment form - including -----BEGIN CERTIFICATE REQUEST-----to-----END CERTIFICATE REQUEST-----
• Click Next
• Confirm your details in the enrollment form
• Finish

To save your private key:

• Go to: Certificates snap in in the MMC
• Select Requests
• Select All tasks
• Select Export

We recommend that you make a note of your password and backup your key, as only you know these, so if you loose them we can't help! A floppy diskette or other removable media is recommended for your backup files.

C I Host InstantSSL Certificates are compatible with all webserver software. If your webserver software does not appear on the above list, please contact support@cihost.com with full details of your webserver software and we will contact you with further instructions.

1. Sign onto the Webserver and select the server to manage
2. Select the Security tab and then Request a Certificate
3. Complete the required boxes and click OK
4. An email is then sent to the email address specified containing your CSR
5. The CSR will be required when requesting your certificate.

C I Host InstantSSL Certificates are compatible with all webserver software. If your webserver software does not appear on the above list, please contact support@cihost.com with full details of your webserver software and we will contact you with further instructions.

Please note that these files were adapted from online resources available at http://www.plesk.com/html/products/psa/doc.htm

A CSR is a file containing your certificate application information, including your Public Key. Generate your CSR and then copy and paste the CSR file into the webform in the enrollment process.

Important Notes on Certificates

• In order to use SSL certificates for a given domain, the domain MUST be set-up for IP-Based hosting.
• When an IP-based hosting account is created with SSL support, a default SSL certificate is uploaded automatically. However, this certificate will not be recognized by a browser as one that is signed by a certificate signing authority.
• The default SSL certificate can be replaced by either a self-signed certificate or one signed by a recognized certificate-signing authority. The self-signed certificate is valid and secure, but many clients prefer to have a certificate signed by a known Certificate Signing Authority.
• You can generate a certificate with the SSLeay utility and submit it to any valid certificate authority. This can be done using the CSR option within PSA.
• If the given domain has the www prefix enabled, you must set-up your CSR or self-signed certificate with the www prefix included. If you do not, you will receive a warning message when trying to access the domain with the www prefix.
• Remember to enter your certificate information in PEM format. PEM format means that the RSA Private Key text must be followed by the Certificate text.
• All certificates are located in the ../vhosts/'domain name'/cert/httpsd.pem file. Where this directory reads "domain name", you must enter the domain name for which the certificate was created.

Generate a Self-signed Certificate or Certificate Signing Request

Access the domain management function by clicking on the Domains button at the top of the PSA interface. The Domain List page appears.

1. Click the domain name that you want to work with. The Domain Administration page appears.
2. If you have established an IP based hosting account with SSL support, the Certificate button will be enabled.
3. Click the Certificate button. The SSL certificate setup page appears.
4. The Certificate Information: section lists information needed for a certificate signing request, or a self-signed certificate. You must fill out these fields before generating your CSR or self-signed certificate.
5. The Bits selection allows you to choose the level of encryption of your SSL certificate. Select the appropriate number from the drop down box next to Bits:.
6. To enter the information into the provided text input fields (State or Province, Locality, Organization Name and Organization Unit Name (optional)) click in the text boxes and enter the appropriate name.
7. To enter the Domain Name for the certificate, click in the text box next to Domain Name: and enter the appropriate domain.
8. The domain name is a required field. This will be the only domain name that can be used to access the Control Panel without receiving a certificate warning in the browser. The expected format is www.domainname.com or domainname.com.
9. Click on the Request button.
10. Selecting Request results in the sending of a certificate-signing request (CSR) to the email address you provided in the certificate fields discussed above. When a CSR (certificate signing request) is generated there are two different text sections, the RSA Private Key and the Certificate Request. Do not lose your RSA private key. You will need this during the certificate installation process. Losing it is likely to result in the need to purchase another certificate.
11. Copy and paste the Certificate Request emailed to you into the InstantSSL web form where it requests a CSR (Certificate Signing Request).
12. When you are satisfied that the SSL certificate has been generated or the SSL certificate request has been correctly implemented, click Up Level to return to the Domain Administration page.

C I Host InstantSSL Certificates are compatible with all webserver software. If your webserver software does not appear on the above list, please contact support@cihost.com with full details of your webserver software and we will contact you with further instructions.

A CSR is a file containing your certificate application information, including your Public Key. Generate your CSR and then copy and paste the CSR file into the webform in the enrollment process.

Generate keys and Certificate Signing Request:

• Open Website Server Properties and select Key Ring
• Select New Key Pair and follow the wizard:
• Ensure all the details you enter are correct.
• When you have completed the wizard select Done, do not select the box to choose a Certification Authority.
• When enrolling for a Certificate locate the CSR file and copy/paste the Certificate Request text into the CSR box. Complete the online enrollment process

C I Host InstantSSL Certificates are compatible with all webserver software. If your webserver software does not appear on the above list, please contact support@cihost.com with full details of your webserver software and we will contact you with further instructions.

1. Login to the web server
2. Select SSL certificates
3. Against Creating a Certificate Set select Create
4. Select Buy a Certificate From Another Certifying Authority, then click OK
5. Complete the fields with your specific information, then click OK
6. Copy the Certificate Singing Request (CSR) text into a text editor for later use when requesting your certificate

C I Host InstantSSL Certificates are compatible with all webserver software. If your webserver software does not appear on the above list, please contact support@cihost.com with full details of your webserver software and we will contact you with further instructions.