What is the ideal way to create a Certificate Signing Request for IBM HTTP Server?

To generate a CSR for a IBM HTTP Server, please follow these steps:

Step 1: Create a Key Database

A key database is a file that the server uses to store one or more key pairs and certificates. You can use one key database for all your key pairs and certificates, or create multiple databases.

Note: If you are starting IKEYMAN to create a new key database file, the file is stored in the directory where you start IKEYMAN.

  1. Enter IKEYMAN on a command line on UNIX, or start the Key Management utility in the IBM HTTP Server folder, on Windows.
  2. Select Key Database File from the main user interface, select New.
  3. In the New dialog box, enter your key database name. Click OK.
  4. In the Password Prompt dialog box, enter a password, enter to confirm the password. Click OK.

Step 2: Create your Certificate Signing Request

  1. Enter IKEYMAN on a command line on UNIX, or start the Key Management utility in the IBM HTTP Server folder, on Windows.
  2. Select Key Database File from the main user interface, select Open.
  3. In the Open dialog box, select your key database name. Click OK.
  4. In the Password Prompt dialog box, enter your correct password and click OK.
  5. Select Create from the main user interface, select New Certificate Request.
  6. In the New Key and Certificate Request dialog box, enter:
      • Key Label: A descriptive comment to identify the key and certificate in the database.
      • Keysize: Use 2048
    • Organisation - The legal (officially registered) name of your organization/company include Inc., LLP., Pvt, Plc. Ltd. SARL., etc
    • Organisational unit - The name of your department within the organization (this is often "IT," "Web," or is just left blank).
    • City/locality - The city or town in which your organization is located.
    • State/province - The state in which your organization is located.
    • Country - Click here for the official list of ISO country codes for this field.
    • Certificate request file name, or use the default name
  7. Click OK.
  8. In the Information dialog box, click OK.