Generating a Certificate Signing Request (CSR) using IBM HTTP Server

Using IKEYMAN for CSR Generation

Note: If you are starting IKEYMAN to create a new key database file, the file is stored in the directory where you start IKEYMAN.

To create a new Key Database:

• A key database is a file that the server uses to store one or more key pairs and certificates. You can use one key database for all your key pairs and certificates, or create multiple databases.
• Enter IKEYMAN on a command line in UNIX, or start the Key Management utility in the IBM HTTP Server folder, in Windows.
• Select Key Database File from the main user interface, select New.
• In the New dialog box, enter your key database name. Click OK.
• In the Password Prompt dialog box, enter a password, enter to confirm the password. Click OK.

Creating a New Key Pair and Certificate Request:

• Enter IKEYMAN on a command line in UNIX, or start the Key Management utility in the IBM HTTP Server folder on Windows.
• Select Key Database File, from the main user interface and select Open.
• In the Open dialog box, select your key database name. Click OK.
• In the Password Prompt dialog box, enter your correct password and click OK.
• Select Create from the main user interface, select New Certificate Request.
• In the New Key and Certificate Request dialog box, enter:
  • Key Label: A descriptive comment to identify the key and certificate in the database.
  • Keysize:
  • Organization Name:
  • Organization Unit:
  • Locality:
  • State/Province:
  • Zipcode/Postcode:#
  • Country: Enter a country code. Example: US or GB etc
  • Certificate request file name, or use the default name
• Click OK.
• In the Information dialog box, click OK.