Knowledgebase

Resolution

To generate a Certificate Signing Request (CSR) file using Apple Mac OS X 10.6, snow leopard, perform the following steps:

1. Launch the Server Admin tool and connect to the server where you want to install the certificate.

   Applications > Server > Server Admin

2. Double click the server name in the SERVERS list.
3. Enter the password, click Connect
4. From the toolbar select Certificates
5. Click + (add) button
6. Select Create a Certificate Identity to open Certificate Assistant
   • Name: Your certificate name (e.g. www.verisign.com)
   • Identity Type: Self Signed Root
   • Certificate Type: SSL Server
   • Override the defaults by selecting the option “Let me override defaults”
7. Click Continue
8. Changes to the Serial Number or Validity Period is not required, click Continue
9. Enter the Certificate Information:
   • Email Address - An email address of the responsible party for certificates
   • Common Name - The fully-qualified domain name for which you plan to use your certificate (e.g., - "www.example.com").
   • Organization - The full legal name of your organization. The listed organization must be the legal registrant of the domain name in the certificate request.
   • Organizational Unit (Optional) - Enter the name of a business unit or group. If applicable, you may enter the DBA (doing business as) name in this field.
   • City (Locality) - Name of the city in which your organization is registered/located. Please spell out the name of the city. Note: Do not abbreviate.
   • State/Province - Name of state or province where your organization is located. Please enter the full name. Note: Do not abbreviate.
   • Country - The two-letter International Organization for Standardization (ISO) format country code for the country in which your organization is legally registered.
10. Click Continue
11. Key Pair Information:
    • Key Size: 2048 bits
    • Algorithm: RSA
12. Click Continue
13. Proceed through the following screens, accept the defaults for each of the following:
    1. Key Usage Extension
    2. Extended Key Usage Extension
    3. Basic Constraints Extension
    4. Subject Alternative Name Extension
14. After the last screen, the Certificate Assistant will save the Certificate and quit. You will be returned to Server Admin, and the self signed certificate should be displayed in the Certificates pane.
15. Select the new certificate.
16. Below the certificate name, click the Action menu (looks like a gear) and choose Generate Certificate Signing Request (CSR).
17. Click Save to save the CSR.

For additional information please see the following Apple Support article:

http://support.apple.com/kb/HT3976

Disclaimer:

Thawte has made efforts to ensure the accuracy and completeness of the information in this document. However, Thawte makes no warranties of any kind (whether express, implied or statutory) with respect to the information contained herein. Thawte assumes no liability to any party for any loss or damage (whether direct or indirect) caused by any errors, omissions, or statements of any kind contained in this document. Further, Thawte assumes no liability arising from the application or use of the product or service described herein and specifically disclaims any representation that the products or services described herein do not infringe upon any existing or future intellectual property rights. Nothing herein grants the reader any license to make, use, or sell equipment or products constructed in accordance with this document. Finally, all rights and privileges related to any intellectual property right described herein are vested in the patent, trademark, or service mark owner, and no other person may exercise such rights without express permission, authority, or license secured from the patent, trademark, or service mark owner. Thawte reserves the right to make changes to any information herein without further notice.