 |
 |
Managed PKI for SSL Support
|
CSR Generation for BEA WebLogic 6.0
To generate a CSR, you need to create a key
pair for your server. These two items comprise a digital certificate
key pair and cannot be separated. If you lose your public/private key
file or your password and generate a new one, your SSL Certificate will
no longer match. You will have to request a new SSL Certificate from
your Managed PKI for SSL Administrator.
VeriSign recommends that you contact the BEA
WebLogic 6.0 vendor for additional information.
Generate a Key Pair and Certificate Signing
Request
- Start
the Certificate Request Generator servlet. The .war file for the servlet
is located in the \wlserver6.0\config\mydomain\applications directory.
The .war file is automatically installed when you start WebLogic Server.
- In a
Web browser, enter the URL for the Certificate Request Generator servlet
as follows: https://hostname:port/Certificate
The hostname is the DNS name of the machine running WebLogic Server.
The port is the number of the port at which WebLogic Server listens
for SSL connections. The default is 7002.
- The Certificate
Request Generator servlet loads a form in your Web browser.
- Complete
the form.
- Click
on the Generate
Request button.
- That
creates a key pair and a CSR.
- To copy
and paste the information into the enrolment form, open the file in
a text editor that does not add extra characters (Notepad or VI are
recommended).
- Go to
your MPKI for SSL enrolment pages. (Your administrator will provide
you with this URL.)
Terms Defined
Common Name
The Common Name is the Host + Domain Name.
It looks like "www.company.co.uk" or "company.co.uk".
VeriSign certificates can only be used on Web
servers using the Common Name specified during enrolment. For example,
a certificate for the domain "domain.co.uk" will receive a
warning if accessing a site named "www.domain.co.uk" or "secure.domain.co.uk",
because "www.domain.co.uk" and "secure.domain.co.uk"
are different from "domain.co.uk".
Organisation Information
- If your company
or department has an &, @, or any other symbol using the shift key
in its name, you must spell out the symbol or omit it to enrol.
- The “Org Unit” field
is the name of the department or organisation unit making the request.
- The Locality field
is the city or town name, for example: Guildford.
- Do not abbreviate
the county name, for example: Surrey.
- Use the two-letter
code without punctuation for country, for example: GB.
Contact Information
Your Managed PKI for SSL Administrator will
be responsible for issuing the certificate to you after your enrolment
has been completed. Please contact them for assistance.
|
 |