# genkey myservername

If you have already generated your private key and need to generate a CSR only, use the following command instead. Also, if you are running an older version of Stronghold, you may have to enter the following command after genkey.

Note: Replace myservername with the actual name of your host on your server. The genkey command will then create the private key and CSR pair and display the locations of the both.

When you are prompted for the key size, use 1024 bits (or the highest available) and press Enter.

The next part will require you type random characters until the counter drops to zero and the script will beep.

Press "y" to proceed and then you will enter the data for your CSR. When entering the country/state/city information, please use the locality information for your business. Also, please do not use abbreviations. For example, if your company operates in Texas, please use "Texas" in the state field rather than "TX". If you are an international customer in a country without states or provinces, simply use your country's name in the state field. For your organization name, please include your full legal company name, including any "Inc" or "LLC" suffixes if applicable. When entering your common name, use your site's address, such as www.securetrust.com or Trustwave.com. Please do not include http:// or https://.

When asked to choose your Certificate Authority (CA), please choose "Other".

After the script has completed, please back up your private key and csr - you can find them in the locations specified by the genkey command. You will need to open the CSR in a suitable text editor and copy the entire CSR to the clipboard - including the dashed lines at the top and bottom. Paste this text into the Trustwave Control Center and you will be ready to begin you certificate validation process.