Requesting a signed certificate from the CA
Request a signed SSL certificate from the Certificate Authority.
Procedure
- Log in to the Sametime® System Console.
- In the navigation tree, click Security > SSL certificate and key management.
- In the "Related Items" section, click Key stores and certificates.
- In the Key stores and certificates window,
select the appropriate keystore.
- In a cell configuration, select CellDefaultKeyStore.
- In a node configuration, select NodeDefaultKeyStore.
- In the "Additional Properties" section, click Personal certificate requests.
- In the SSL certificate and key management window,
provide information for the certificate request.
In the File for certificate request field, provide a path and file name where the request will be stored when it is generated. In the Common name field, provide the host name of the server for which you are requesting the certificate. You can use the host's short name in the Key label field.
If your organization has standards around SSL certificates, check with your Certificate Administrator before generating the certificate signing requests, and then fill in the form based on the information for your organization. Table 1. contains descriptions of the fields in the request form.
Table 1. Certificate request fieldsNames and descriptions of the fields on the certificate request form. Request field Description Example value File Name Provide a path to the location where the certificate request file (.csr) will be stored. If a file with the same name already exists in that location, it will be overwritten. C:\SSLCSR\emeetings.csr Key Label Any descriptive name that can be used to identify the certificate. eMeetings Common Name Fully qualified host name of the server that will use the certificate. The host name must be resolvable in DNS. eMeetings.corp.renovations.com Organization Company or organization name Renovations Organizational Unit Organizational unit (for example, division or department) requesting the certificate. Information Technology Locality Location (for example, city) where the company is registered. Omaha State or Province Name of the state or province where the company is registered. Do not use abbreviations. Nebraska Zip Code Company postal code. 68116 Country Code Two-character country code. US - Click Apply and Save.
The certificate request is created in the specified file location in the CellDefaultKeystore and functions as a temporary place holder for the signed certificate, until you manually receive the certificate in the keystore
- Send the generated .csr file to a CA for signing.