Overview Of The Certificate Signing Request - Nortel 1000 Administration Manual

Overview of the Certificate Signing Request

Windows, which includes an OpenSSL module. Instructions for
downloading, installing, and using the Cygwin UNIX environment to
generate a CSR are included in this topic.
If you are familiar with certificate manipulation, you can use other tools to
create a PEM-formatted file. The certificate that you upload to the
Application Gateway must have the following characteristics:
It must be in PEM format and must include a private key.
•
The signed certificate and private key must be unencrypted.
•
The following topics describe how to perform the tasks associated with
generating a CSR:
Overview of the Certificate Signing Request, page 15
•
Installing the Cygwin UNIX Environment for Windows, page 16
•
Generating a CSR, page 17
•
Unencrypting the Private Key, page 18
•
Converting to a PEM-Formatted Certificate, page 18
•
Combining the Private Key with the Signed Certificate, page 20
•
Generating Trusted Certificates for Multiple Levels, page 20
•
Uploading a Certificate to the Application Gateway, page 21
•
Getting Design Studio to Recognize a Certificate, page 22
•
If you are unfamiliar with generating a CSR, review this topic for
background information.
The general process for generating a CSR and handling the signed
certificate is as follows:
Generate a CSR (public.csr) and private key (private.key) as described
1.
in "Generating a CSR," page
Send the public.csr file to an authorized certificate provider.
2.
If you used a tool other than the Cygwin UNIX environment to
3.
generate the CSR, check the format of the private key. If it is in DER
format or is encrypted, convert it to PEM format as described in
"Unencrypting the Private Key," page
Chapter 2
Generating a Secure Certificate
17.
18.
Application Gateway Administration Guide
Basic Administration
15