Crypto Token Generate CSR Page
On the Generate CSR page, generate certificate signing requests.
Make sure to select every key that should have a CSR generated.
Generate CSR
Column | Description |
|---|---|
Key | Specify the key alias of the key to generate the CSR for. |
Signature Algorithm | Specify signature algorithm to use when creating the signature in the CSR (proof-of-possession). By default, the signature algorithms can be selected from a drop-down list listing common algorithms. Note that some of these algorithms might not be supported by the crypto token used. To specify a signature algorithm manually, click >. The algorithm must work with the key algorithm used (RSA or ECDSA). Examples:
|
DN | Specify the subject DN to include in the CSR. Certification Authorities might or might not use this information when creating the certificate. Example:
|
Email Addresses | Specify the email addresses to request Subject Alternative Name (SAN) extension requests for in the CSR. Click the + (add) button to add an additional row for another email SAN request. To add more than one row at a time, change the value of the text field from "1" to the number of rows to add before clicking the + (add) button. Click the - (remove) button to remove the last email row, if more than one row has been added. Empty rows are ignored. |
Result | After clicking the Generate button, this column shows a button for each worker to download the generated CSR file. |
Format Options
Standard CSR | Creates a normal PKCS#10 certificate signing request. |
CSR signed by worker | Create a PKCS#10 certificate signing request that is encapsulated in a PKCS#7/CMS SignedData structure. If selected, use the drop-down list to select the CMS signer that will sign the request. |
Actions
Action | Description |
|---|---|
Generate | Performs the CSR generation for each selected key. The Result column provides a download button for each CSR generated. |
Cancel | Returns to the previous page. |