IBM HTTP Server

Important Note:

Effective 1 January 2011, we will no longer support any Certificate Signing Request [CSR] generated with a 1024 bit key. This is because NIST, PKIX, WebTrust and other respective security standards no longer consider the 1024 bit key size as secure. Read more > [1]

Instructions

Using IKEYMAN for CSR Generation

NOTE: If you are starting IKEYMAN to create a new key database file, the file is stored in the directory where you start IKEYMAN.

To create a new Key Database:

• A key database is a file that the server uses to store one or more key pairs and certificates. You can use one key database for all your key pairs and certificates, or create multiple databases.
• Enter IKEYMAN on a command line on UNIX, or start the Key Management utility in the IBM HTTP Server folder, on Windows.
• Select Key Database File from the main user interface, select New.
• In the New dialog box, enter your key database name. Click OK.
• In the Password Prompt dialog box, enter a password, enter to confirm the password. Click OK.

Creating a New Key Pair and Certificate Request:

• Enter IKEYMAN on a command line on UNIX, or start the Key Management utility in the IBM HTTP Server folder on Windows.
• Select Key Database File, from the main user interface and select Open.
• In the Open dialog box, select your key database name. Click OK.
• In the Password Prompt dialog box, enter your correct password and click OK.
• Select Create from the main user interface, select New Certificate Request.
• In the New Key and Certificate Request dialog box, enter:


• Key Label: A descriptive comment to identify the key and certificate in the database.
• Keysize:
• Organization Name:
• Organization Unit:
• Locality:
• State/Province:
• Zipcode/Postcode:#
• Country: Enter a country code. Example: US or GB etc
• Certificate request file name, or use the default name
• Click OK.

In the Information dialog box, click OK.