GlobalSign Security Solutions Secure SSL Certificates  |  Home  |  Contact Us    
Search Technical Support & FAQs  
 
Certificates SSL menu divider Enterprise Solutions SSL menu divider Partners SSL menu divider Customer Support SSL menu divider About GlobalSign

 

 


Customer Support > SSL Certificates > Certificate Signing Request Generation - Tomcat - KB1008

To generate a Certificate Signing Request (CSR), perform the following steps:

Please use JDK 1.4 or higher


1. Create a certificate keystore and private key with the following command:

$JAVA_HOME\bin>keytool -genkey -alias your_alaias_name -keyalg RSA -keystore your_keystore_filename

Note: Replace $JAVA_HOME with the directory of your Java Install - If you are a on Windows Server, change directory to \Program Files\Java\javaversionhere\bin

1

2. Specify the password - must be at least 6 characters long, and MUST be remembered.


3. You must input the following:

What is your first and last name? *This is the Common Name Field - The Fully Qualified Domain Name MUST be entered here*
[Unknown]: www.globalsign.net
What is the name of your organizational unit?
[Global Sign]: Global Sign
What is the name of your organization?
[Global Sign]: Global Sign
What is the name of your City or Locality?
[London]: London
What is the name of your State or Province?
[London]: London
What is the two-letter country code for this unit?
[GB]: GB
Is CN=www.globalsign.net, OU=Global Sign, O=Global Sign, L=London, ST=London, C=
GB correct?
[no]: yes

Enter key password for <your_alias_name>
(RETURN if same as keystore password):

2


4. Create the Certificate Signing Request file with the following command:

$JAVA_HOME\bin>keytool -certreq -keyalg RSA -alias your_alias_name -file certreq.csr -keystore your_keystore_filename

Enter keystore password: your_password_here

3


5. The certreq.txt file will now be generated - this file can be entered into the website. Insure to include:

-----BEGIN NEW CERTIFICATE REQUEST-----

-----END NEW CERTIFICATE REQUEST-----

Install your SSL certificate and CA Root Bundle
   
  SSL Certificate Supported Browsers
GlobalSign Inc (a member of GMO Internet Inc group TSE:9449) offers online security services and has been operating as a
trusted Root Certification Authority
for over 10 years. GlobalSign Certificates are trusted by all popular Browsers,
Operating Systems, Devices and Applications and include SSL, SSL Certificates, Extended SSL Certificates, Code Signing,
Personal Digital IDs
, Enterprise Digital IDs, internal PKI & Microsoft CA root signing.