Netscape Enterprise CSR Generation Instructions

Netscape Enterprise
(CSR Generation Procedures)

Follow these instructions to generate a CSR for your Web site.

Creating a Key Pair

1. Open a DOS window. At the command line, type
cd \bin\admin\admin\bin.

2. Type sec-key at the command prompt. A Netscape key-pair file generation window appears.

3. Enter an alias name for the key-pair file. The alias name should not contain white space.

4. Type OK. Follow the instructions for randomness and then click OK.

5. Enter a password.

Should you choose to enter and use a Private Key password, you will need to make sure that you save that password in a secure place. If you ever need to reinstall your certificate for any reason, you will be required to enter that password. If you forget the password and it is past 30 days from your purchase date, then you will be required to purchase a new certificate. An ounce of prevention will prevent this from happening.

6. Return to the Keys and Certificates menu in the Netscape Suitespot Server administration page.

Creating a Certificate Signing Request

1. Start the Netscape administration page.

2. Login as the administrator.

3. Click on Keys and Certificates on the administration main menu.

4. Select Request a Certificate on the navigation window.

5. Click on New Certificate in the Request a Server Certificate window.

6. Select CA URL (enter anything in the box).

7. Select the alias that you generated in the key-pair file.

8. Type in the Distinguished Name Field information. This information will appear in your server certificate. Any variations can lead to delays in the verification process. When creating a CSR you must follow these conventions. The following characters can not be accepted: < > ~ ! @ # $ % ^ / \ ( ) ?.

Distinguished Name Field
Explanation

Requester Name
Your Name
Example: John Doe

Telephone Number
Your phone number
Example: (903) 555-1212

Common Name
The fully qualified domain name for your web server. This must be an exact match. If you intend to secure the URL https://www.ebizid.com, then your CSR's common name must be www.ebizid.com.

If you are ordering a Wildcard Certificate, the Common Name field must be in the format of: * . yourdomain . com

Email address
Your email address
Example: admin@ebizid.com

Organization
The exact legal name of your organization. Do not abbreviate your organization name.
Example: EBIZID Inc.

Organization Unit
Section of the organization
Example: IT Department

City or Locality
The city where your organization is legally located.
Example: Dallas

State or Province
The state or province where your organization is legally located. Can not be abbreviated.
Example: Texas

Country
The two-letter ISO abbreviation for your country .
For a full list of codes, click here
US = United States

9. Click OK when finished.

What your CSR will look like when your finished.

When sending your CSR to EBIZID, you MUST copy and paste the entire CSR Request, including the beginning and ending lines as shown below.
-----BEGIN CERTIFICATE REQUEST-----
-----END CERTIFICATE REQUEST-----
Failure to do so will result in you having to resend your CSR in the correct format to EBIZID which will cause a prolonged delay in processing your order.

10. Save this CSR into a text file. If you are using Windows or NT, you can use Notepad to cut and paste the CSR and then save it

Backup the private key, as there is no means to recover it should it be lost. The private key is used as input in the command to generate a Certificate Signing Request (CSR). EBIZID will reissue certificates no more than 30 days from the time of purchase. If you do not backup your key and your server fails or other problems occur after the 30 days, you will then be required to purchase a new certificate. An ounce of prevention is all that is required to prevent this from happening.