Novell I-Chain CSR Generation Instructions

Novell I-Chain
(CSR Generation Procedures)

1. Start the ichain Management http://youriChain:1959/appliance/config.html

2. Select the Home-Certificate Maintenance panel.

3. Select Create to create the CSR

Enter the following fields:

Certificate name - Any alphanumeric name as long as it is unique
Subject name - The DNS name of the site that is to be secured
Signature algorithm - can be SHA or MD5
RSA Key size - use 1024 bits
Select 'Use external certificate authority'
Organization - The company that owns the web site

Entering spaces may cause problems !

City, State or Province code, two character country code

4. Select OK.

The Certificate Maintenance panel will now look like this:

If you are ordering a Wildcard Certificate, the Common Name field must be in the format of: * . yourdomain . com

5. Select Apply to generate the CSR. When it is ready the Status will indicate "CSR in Progress".

6. When you select 'View the CSR'. You should see:

This is your certificate request that you will need during the Order Process.

When sending your CSR to EBIZID, you MUST copy and paste the entire CSR Request, including the beginning and ending lines as shown below.
-----BEGIN CERTIFICATE REQUEST-----
-----END CERTIFICATE REQUEST-----
Failure to do so will result in you having to resend your CSR in the correct format to EBIZID which will cause a prolonged delay in processing your order.

Backup the private key, as there is no means to recover it should it be lost. The private key is used as input in the command to generate a Certificate Signing Request (CSR). EBIZID will reissue certificates no more than 30 days from the time of purchase. If you do not backup your key and your server fails or other problems occur after the 30 days, you will then be required to purchase a new certificate. An ounce of prevention is all that is required to prevent this from happening.

Should you choose to enter and use a Private Key password, you will need to make sure that you save that password in a secure place. If you ever need to reinstall your certificate for any reason, you will be required to enter that password. If you forget the password and it is past 30 days from your purchase date, then you will be required to purchase a new certificate. An ounce of prevention will prevent this from happening.