SSL Certificate Support: Creating a Certificate Signing Request (CSR)

Creating a CSR for IBM Websphere

» Go back and choose a different server

» What to do after you submit your CSR to Trustwave

» SSL Certificate Purchasing Information for IBM WebSphere

» SSL Certificate installation instructions for IBM WebSphere

Creating a keystore Creating a keystore
On the IBM WebSphere server, you are required to create a keystore prior to generating private keys and certificate signing requests. You can create the keystore with the Sun keytool or with the ikeyman tool from IBM. We will utilize the ikeyman method for this documentation.

First, start the ikeyman tool. Run the following command:

# ./ikeyman.sh

The IBM Key Management interface will start after running the command. From the "Key Database File" menu, choose the "New" option. In the next dialog box, choose the following options:

Key database type: Choose JKS.
File name: Your keystore name. We will use .keystore for this example.
Location: Your keystore location. We will use /usr/bin/java/websphere/bin/ for this example.

Press "OK" when you are finished.

Creating the CSR Creating the CSR
The next screen will ask for your company information to be included on the CSR. For the key label, choose a name for your key. We recommend using a name similar to your hostname so that you can keep your keys separated. Be sure to choose 1024 bits for the key size.

Now, the Key Manager will ask for your company information. As you complete these steps, please keep the following in mind:

Country/State/City - Enter the locality information based on where your business operates, not where your server is located. Spell out all state and city information. For example, if your business operates in Texas, use "Texas" for the state, rather than "TX". If you are an international customer in a country without states or provinces, please use your country name in the state field.

Organization - Please use your full, unabbreviated legal business name including any applicable suffix, such as "Inc" or "LLC". If your company name is registered in an abbreviated form, then you may use abbreviations if you would like to do so.

Common Name - This is where you type the web address of your site. For example, www.securetrust.com and xramp.com are both acceptable. Please do not include http:// or https://.

After you enter your company information, you will need to specify a file in which to store your CSR. Use the same directory as your keystore. For this example, we will call the key certreq.arm.

When you are finished, click "OK".

Submit the CSR to Trustwave Submit the CSR to Trustwave
The Key Management tool should now display an information window alerting you that your CSR has been created and stored in a file. Note the location of the file and click "OK". Open the CSR file in a suitable text editor and paste it into the Trustwave Control Center.

» After you submit your CSR, check your validation status

Trustwave Technical Support Options
Toll-Free: 866-775-2378
Direct: +1-608-294-6940
E-Mail: sslsupport@trustwave.com
SSL Certificate Customers - Instant Support!
We invite our SSL Certificate Customers to use our new online troubleshooter, HelpNow, to diagnose SSL certificate issues instantly. Get HelpNow! »
Trustwave Support Tips:
If you are contacting us about your SSL certificate via e-mail, please provide us with your website's address and a detailed description of the issue. Screenshots may also help us resolve your problem quickly, so you are welcome to include those as well.
Home Legal Information Privacy Policy Contact Us International
© Trustwave
Ph: 888-878-7817 (312-873-7500 outside U.S. or Canada) Fax: 312-443-8028 info@trustwave.com