Checklist for generating certificate signing request (CSR)

Last Updated : Oct 09, 2020 |
Session Manager does not provide a GUI to generate a CSR to replace Session Manager Identity Certificates. An alternate tool such as OpenSSL is used to generate the CSR.
Prolog information
This checklist describes the high-level steps to replace Session Manager Identity Certificates with a CSR.
No.
Task
Description
Notes
1
Generate a CSR and its corresponding private key using OpenSSL
Generate a CSR and its corresponding private key using OpenSSL or other adequate tool such as Microsoft Server. Ensure that the CSR contains correct certificate attributes
2
Get the Identity Certificate signed.
Send the CSR to the PKI administrator to get it signed by the third party CA. The result is a signed Identity Certificate.
3
Bundle the Identity Certificates and private key into PKCS#12 container using OpenSSL.
4
Import the PKCS#12 certificate and private key into Session Manager.