How to create a Certificate Signing Request (CSR) to create a new SSL for your appliance
03/26/2020 526 17724
DESCRIPTION: This article explains how to create a Certificate Signing Request (CSR) to create a new SSL for your appliance. Please note, following these steps will result in a restart of the appliance.
1. Log into the appliance | Go to System | Certificates | Click Generate CSR.
2. Fill out the Certificate Signing Request with information on the Fully Qualified Domain Name (FQDN) you will be using for the SSL and click Accept.
3. This will download a zip file with two files.
server.csr (The CSR needed by the Certificate Authority to create a SSL for your domain
server.key (The private key for your new certificate)
Store these in a safe location as you will need the files in later steps.
4. Open server.csr with a text editor. Notepad ++ is a good option because it keeps the format that works best for copying a csr request over to a Certificate Authority.
5. Request a SSL from your Certificate Authority providing this CSR text where they request.
6. Once you get the certificate back from the Certificate authority place a copy of the new .cer or .crt and a copy of the server.key obtained in step 3 into a folder by themselves.
7. Rename the copy of your new certificate to server.crt.
TIP: Please verify your 'Hide extensions for known file types' is unchecked in your folder options in Windows settings as it can cause the file to be named incorrectly after rename
8. ZIP just the two files into a .zip file.
9. Go back to the appliance | Go to System | Certificates | Click Import Certificate.
10. Select the .zip file you created in step 8 | Click Accept.
11. You can now set the new certificate as the default | Click Accept.