-
Products
-
SonicPlatform
SonicPlatform is the cybersecurity platform purpose-built for MSPs, making managing complex security environments among multiple tenants easy and streamlined.
Discover More
-
-
Solutions
-
Federal
Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn MoreFederalProtect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn More - Industries
- Use Cases
-
-
Partners
-
Partner Portal
Access to deal registration, MDF, sales and marketing tools, training and more
Learn MorePartner PortalAccess to deal registration, MDF, sales and marketing tools, training and more
Learn More - SonicWall Partners
- Partner Resources
-
-
Support
-
Support Portal
Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn MoreSupport PortalFind answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn More - Support
- Resources
- Capture Labs
-
- Company
- Contact Us
How to create a Certificate Signing Request using OpenSSL?
06/27/2024 
1,180 People found this article helpful
488,914 Views
Description
How to create and import a signed certificate with private key into GMS/Analytics for HTTPS login using OpenSSL.
Resolution
Feature/Application:
When a signed certificate along with its private key requires to be imported into the SonicWall GMS, the certificate can be in the Java Key Store format with .jks extension or a signed public certificate and private key file. Import is done under the Deployment > Settings page of System Interface (/appliance) of GMS/Analytics. This article provides instructions for creating and importing a public certificate and private key file. The certificate file (.crt/.cer), its corresponding key file (.key) and the password are required.
Procedure:
Installing OpenSSL for Windows:
1: OpenSSL download page - OpenSSL Download
2: Download Win32 OpenSSL v? (latest version)
3: Launch OpenSSL .exe file
4: Open Command Prompt (DOS) as Administrator
5: Type at prompt: cd c:\openssl-win32\bin (If your folder is not in c:\openssl-win32 then change command appropriately)
Creating CSR and private key using OpenSSL:
1: Use the following command to create CSR and private key file via command prompt:
Navigate to - [install location]:\OpenSSL-Win32\bin
openssl req -out CSR.csr -new -newkey rsa:2048 -nodes -keyout privateKey.key
2: After step 1 is run you will be prompted for appropriate info for CSR generation (Common Name, Organization, etc).
3. Once you finish all prompts, the CSR and Key file will be generated.
4: Gather CSR and private key files from the OpenSSL-Win32\bin folder.
5: Submit the CSR to CA for re-key of your current certificate or request of new certificate.
Importing certificate into GMS
1: Gather the signed certificate from CA (Apache or Tomcat format).
2: Import certificate (provided from CA) and .key file created via OpenSSL from the System Interface under Deployment>Settings>SSL Access Configuration of System Interface (/appliance).
3: Reboot server.
Related Articles
- How to Expand the HDD of a GMS Virtual Appliance
- How to create a template in NSM
- How to edit Device Groups in NSM
YES
NO