Checklist for generating certificate signing request (CSR)

Last Updated : Oct 09, 2020 |

Session Manager does not provide a GUI to generate a CSR to replace Session Manager Identity Certificates. An alternate tool such as OpenSSL is used to generate the CSR.

This checklist describes the high-level steps to replace Session Manager Identity Certificates with a CSR.

No.

Task

Description

Notes

1

Generate a CSR and its corresponding private key using OpenSSL

Generate a CSR and its corresponding private key using OpenSSL or other adequate tool such as Microsoft Server. Ensure that the CSR contains correct certificate attributes

For more information, see CSR and Private Key generation through OpenSSL

2

Get the Identity Certificate signed.

Send the CSR to the PKI administrator to get it signed by the third party CA. The result is a signed Identity Certificate.

3

Bundle the Identity Certificates and private key into PKCS#12 container using OpenSSL.

For more information see Bundle Identity Certificate and Private Key in a PKCS #12 container

4

Import the PKCS#12 certificate and private key into Session Manager.

For more information see Replacing an identity certificate by a third party CA issued certificate