ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzahu_5.4.0.1/rzahustep2createaserverorclientcertificaterequest.htm

78 lines
5.5 KiB
HTML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow" />
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="task" />
<meta name="DC.Title" content="Create a server or client certificate request" />
<meta name="DC.Relation" scheme="URI" content="rzahudcmintaccessscen.htm" />
<meta name="DC.Relation" scheme="URI" content="rzahustep1completeplanningworksheets.htm" />
<meta name="DC.Relation" scheme="URI" content="rzahustep3configureapplicationtousessl.htm" />
<meta name="copyright" content="(C) Copyright IBM Corporation 2000, 2006" />
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2000, 2006" />
<meta name="DC.Format" content="XHTML" />
<meta name="DC.Identifier" content="rzahustep2createaserverorclientcertificaterequest" />
<meta name="DC.Language" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
<link rel="stylesheet" type="text/css" href="./ic.css" />
<title>Create a server or client certificate request</title>
</head>
<body id="rzahustep2createaserverorclientcertificaterequest"><a name="rzahustep2createaserverorclientcertificaterequest"><!-- --></a>
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<h1 class="topictitle1">Create a server or client certificate request</h1>
<div><ol><li class="stepexpand"><span><a href="rzahurzahu66adcmstart.htm#rzahu66a-dcm_start">Start
DCM</a>.</span></li>
<li class="stepexpand"><span>In the navigation frame of DCM, select <span class="uicontrol">Create New Certificate
Store</span> to start the guided task and complete a series of forms. </span> These forms guide you through the process of creating a certificate
store and a certificate that your applications can use for SSL sessions.<div class="note"><span class="notetitle">Note:</span> If
you have questions about how to complete a specific form in this guided task,
select the question mark (<span class="uicontrol">?</span>) at the top of the page
to access the online help. </div>
</li>
<li class="stepexpand"><span>Select <span class="uicontrol">*SYSTEM</span> as the certificate store
to create and click <span class="uicontrol">Continue</span>.</span></li>
<li class="stepexpand"><span>Select <span class="uicontrol">Yes</span> to create a certificate as part
of creating the *SYSTEM certificate store and click <span class="uicontrol">Continue</span>.</span></li>
<li class="stepexpand"><span>Select <span class="uicontrol">VeriSign or other Internet Certificate Authority
(CA)</span> as the signer of the new certificate, and click <span class="uicontrol">Continue</span> to
display a form that allows you to provide identifying information for the
new certificate.</span></li>
<li class="stepexpand"><span>Complete the form and click <span class="uicontrol">Continue</span> to
display a confirmation page. </span> This confirmation page displays the
certificate request data that you must provide to the public Certificate Authority
(CA) that will issue your certificate. The Certificate Signing Request (CSR)
data consists of the public key, distinguished name, and other information
that you specified for the new certificate.</li>
<li class="stepexpand"><span>Carefully copy and paste the CSR data into the certificate application
form, or into a separate file, that the public CA requires for requesting
a certificate. </span> You must use all the CSR data, including both the
Begin and End New Certificate Request lines.<div class="note"><span class="notetitle">Note:</span> When you exit this page,
the data is lost and you cannot recover it.</div>
</li>
<li class="stepexpand"><span>When you exit this page, the data is lost and you cannot recover
it.</span></li>
<li class="stepexpand"><span>Wait for the CA to return the signed, completed certificate before
you continue to the next task step for the scenario.</span></li>
</ol>
<div class="section"><p>After the CA returns the signed completed certificate, you can
configure your application to use SSL, import the certificate into the *SYSTEM
certificate store, and assign it to your application to use for SSL.</p>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzahudcmintaccessscen.htm" title="In this scenario, you lean when and how to use certificates as an authentication mechanism to protect and limit access by public users to public or extranet resources and applications.">Scenario: Use certificates for external authentication</a></div>
<div class="previouslink"><strong>Previous topic:</strong> <a href="rzahustep1completeplanningworksheets.htm">Complete planning work sheets</a></div>
<div class="nextlink"><strong>Next topic:</strong> <a href="rzahustep3configureapplicationtousessl.htm">Configure application to use SSL</a></div>
</div>
</div>
</body>
</html>