Dell Security Management Server Installation and Migration Guide v11.9

Use this procedure to generate a Certificate Signing Request (CSR) for the self-signed certificate created in Generate a New Key Pair and a Self-Signed Certificate.

1. Substitute the same value used previously for <certificatealias>:

   keytool -certreq -sigalg SHA1withRSA -alias <certificate-alias> -keystore .\cacerts -file <csr-filename>

   For example, keytool -certreq -sigalg SHA1withRSA -alias sslkey -keystore .\cacerts -file Dell.csr

   The .csr file contains a BEGIN/END pair to use during the creation of the certificate on the CA.

   Example .CSR File

   

2. Follow your organizational process for acquiring an SSL server certificate from a Certificate Authority. Send the contents of the <csr-filename> for signing.

   NOTE:

   There are several methods to request a valid certificate. An example method is shown in Example Method to Request a Certificate.

3. When the signed certificate is received, store it in a file.

4. As a best practice, back up this certificate in case an error occurs during the import process. This backup prevents having to start the process over.