Eureka OL-8880-01 Generating a Server Certificate, Select Request a Certificate and click Next

Page 7

Chapter 2 Generating Certificates

Certificate Generation with Windows CA

Generating a Server Certificate

This section describes how to generate a server certificate.

Step 1 Use your browser to access the Windows Certificate Services web form using a URL like the following: http://server-name/certsrv. In the example below, the server name is w2ks.

Figure 2-2 Windows Certificate Services Form

Step 2 Select Request a Certificate and click Next.

The next window enables you to select the type of certificate request.

WLSE Express AAA Server Certificate Configuration Guide

	OL-8880-01	2-7

Image 7

Contents Certificate Request Creation RSA Key GenerationCertificate Generation Openssl.cnf Configuration FileExample openssl.cnf File Export Opensslconf /opts/open/openssl.cnf Creating a Self-signed CA Root Certificate and RSA Key Required Certificate Extensions Creating Test Certificates and Keys Creating a CA DirectoryCreating a Client Certificate Request Converting a CA Certificate to PKCS#12Creating a Server Certificate Request and RSA Key Creating a Server Certificate from the RequestOpenssl x509 -in ./ca/certs/client-cert.pem -text Converting a Client Certificate and Private Key to PKCS#12Select Request a Certificate and click Next Generating a Server CertificateSelecting Certificate Request Type Select Advanced request and click NextKey Options section, select Mark keys as exportable Advanced Certificate Request Form Certificate Pending Generating a Client CertificateExample of Client Certificate Request Form Click Next to proceed Certificate RetrievalCheck Pending Certificate Requests 11 Certificate Issued Click Install this certificate to continueSelect Internet Options… Exporting Server and Client CertificatesClick Certificates 13 Certificates Dialog 15 Export Private Key After entering the file name, click Next to continue 19 Completing the Certificate Export Exporting CA Certificates21 Certificates to Export Openssl pkcs12 -in server.pfx -out server.pem Converting PKCS#12 to PEMEND Certificate OL-8880-01