If you need to generate both a private key and a CSR, you will want to use the following command on your server's command line interface: (Replace 'myservername' with your server name.)
# genkey myservername
If you have already generated your private key and need to generate a CSR only, you will want to use the following command on your server's command line interface: (Replace 'myservername' with your server name.)
# genreq myservername
Note: Also, if you are running an older version of Stronghold, you may have to enter the genreq command after genkey.
Press Enter to continue.
When you are prompted for the key size, use 2048 bits (or the highest available) and press Enter.
The next part will require you type random characters until the counter drops to zero and the script will beep.
Press "y" to proceed and then you will enter the data for your CSR.
Location - Enter the location where your business operates, not where your server is located. If you are an international customer in a country without a State/Province or City/Locality, leave those fields blank.
Organization - Enter the full, unabbreviated legal name of your business. Include any applicable suffix, such as "Inc" or "LLC". If your company name is registered in an abbreviated form, then you may use that abbreviation if you want.
Organizational Unit - This field will not be included in your certificate, so you can leave it blank.
Common Name - Enter the web address of your site. It must be a fully qualified domain name. Both www.yourdomain.com and yourdomain.com are acceptable. Do not include http:// or https://. When ordering a wildcard SSL Certificate, you will use *.yourdomain.com
Email Address - Enter the address of the person responsible for SSL in your organization. This field is optional.
When asked to choose your Certificate Authority (CA), please choose "Other".
After the script has completed, please back up your private key and CSR - you can find them in the locations specified by the genkey command.
Now navigate to the location of your saved CSR and open it with a suitable text editor such as Notepad, TextEdit, or vi. Copy the entire text - including the top and bottom dashed lines. You can paste this text directly into the Trustwave® Control Center - Submit your CSR to proceed to validation.