Generating a Certificate Signing Request

To generate a Certificate Signing Request (CSR):

1. In the side menu under Administration, click System Settings.
2. Click Certificates in the navigation toolbar.
   The Certificates page lists all generated certificate signing requests. The active certificate is indicated with a blue check.
3. Click the Generate button.
4. On the Generate Certificate or Private Key dialog that appears:
   

   

   1. Enter a name for the certificate.
   2. Esure the Type is Certificate Signing Request and fill in the remaining fields. See Certificate Settings.
   3. For the Subject, click the 

      

       icon and enter information about the device that the Identity Certificate represents. For more information, see the Subject entry in Certificate Settings. Click the Apply button.
      

      

5. Click the Apply button.
6. Returning to the Certificates list, click the link for the generated CSR to open the file in another window. Copy the contents (including both beginning and ending delimiters) and paste it into your Certificate Authority (CA) application.

The CA returns an intermediate certificate (trust chain) and signed certificate (CRT). See Importing and Activating a Certificate to import the returned certificates.

Tip

Keep in mind that there is a difference between importing a new certificate (that was generated externally) and importing a newly signed certificate whose request was previously generated and exported for signing.