Generate a CSR (certificate signing request) for an SSL certificate
Generate a CSR using Java Keytool
The Java Keytool is a command line tool which generates public key / private key pairs and stores them in a Java KeyStore. The keytool
executable is distributed with the Java SDK (or JRE). To execute it, open a command line (cmd, console, shell etc.). and change directory to the bin directory.
![](https://minisoft.com/support/wp-content/uploads/2022/02/keytool1.png)
Type keytool
and press Enter for a set of commands and assorted instructions.
![](https://minisoft.com/support/wp-content/uploads/2022/02/keytool2.png)
Create a New Keystore
Use the keytool command to create your new key-CSR pairing. Enter the following:
keytool -genkey -alias server -keyalg RSA -keysize 2048 -keystore yourdomain.jks
![](https://minisoft.com/support/wp-content/uploads/2022/02/keytool3.png)
‘Yourdomain’ is the name of the domain you are securing. Confirm that the information is correct by entering ‘yes’ when prompted.
Next you will be asked for your password to confirm.
![](https://minisoft.com/support/wp-content/uploads/2022/02/keytool4.png)
Generate a CSR with your New Keystore
Use keytool
to create the CSR by entering the following:
keytool -certreq -alias server -keyalg RSA -file yourdomain.csr -keystore yourdomain.jks
![](https://minisoft.com/support/wp-content/uploads/2022/02/keytool5.png)
Enter the keystore password.
Microsoft Management Console [Windows]
Add certificate(s) to MMC
In your Windows search feature, enter mmc. Click it to launch the Microsoft Management Console application.
![](https://minisoft.com/support/wp-content/uploads/2022/02/mmc.png)
From File, click Add/Remove Snap-in.
![](https://minisoft.com/support/wp-content/uploads/2022/02/Snap-In1.png)
Click Certificates and then click Add.
![](https://minisoft.com/support/wp-content/uploads/2022/02/Snap-In2.png)
Select Computer account, and then click Next.
![](https://minisoft.com/support/wp-content/uploads/2022/02/Snap-In3.png)
Select Local computer, and then click Finish.
![](https://minisoft.com/support/wp-content/uploads/2022/02/Snap-In4.png)
Click OK.
![](https://minisoft.com/support/wp-content/uploads/2022/02/Snap-In5.png)
Generate CSR and private key
From the left-hand menu in the MMC, expand Certificates (Local Computer) and then Personal. Right-click Certificates and navigate to the following menus: All Tasks > Advanced Operations > Create Custom Request.
![](https://minisoft.com/support/wp-content/uploads/2022/02/CreateCustomRequest.png)
Click Next.
![](https://minisoft.com/support/wp-content/uploads/2022/02/CreateCustomRequest2.png)
Click Active Directory Enrollment Policy.
![](https://minisoft.com/support/wp-content/uploads/2022/02/CreateCustomRequest3.png)
From Template, click Web Server. Make sure that the Request format is PKCS #10 and click Next.
![](https://minisoft.com/support/wp-content/uploads/2022/02/CreateCustomRequest4.png)
Click the downward-facing arrow next to Details and then select Properties.
![](https://minisoft.com/support/wp-content/uploads/2022/02/CreateCustomRequest5.png)
Navigate to the Subject tab. From the Type menu, select the following values, enter the relevant values and select Add. For example:
Common name
: URL [packstation.{yourorganization}.com
]
Organization
: Your Organization
Locality
: City
State
: State/Province
Country
: Country
![](https://minisoft.com/support/wp-content/uploads/2022/02/CreateCustomRequest6.png)
Click the General tab and enter a Friendly name for the certificate.
![](https://minisoft.com/support/wp-content/uploads/2022/02/CreateCustomRequest7.png)
Go to the Private Key tab. From the Key options drop-down, select Make private key exportable. Click OK and then click Next.
![](https://minisoft.com/support/wp-content/uploads/2022/02/CreateCustomRequest8.png)
Browse for the location where you want to save the file. Enter a File Name and click Finish.
![](https://minisoft.com/support/wp-content/uploads/2022/02/CreateCustomRequest9.png)