The example below will generate a CSR for a 2048 bit key length certificate.
- Purchase an SSL Certificate from an issuing authority.
- Create the Certificate Signing Request (CSR):
- Log into your mail server using an Administrator account.
-
Create a file named CSRParameters.inf on the C:\ drive using the contents below as a template:
[NewRequest] Subject="CN=mail.example.com,OU=Research In Motion Limited,O=Research In Motion Limited,S=Nevada,L=Las Vegas,C=US" KeySpec=1 KeyLength=2048 Exportable=TRUE MachineKeySet=TRUE SMIME=False PrivateKeyArchive=FALSE UserProtected=FALSE UseExistingKeySet=FALSE ProviderName="Microsoft RSA SChannel Cryptographic Provider" ProviderType=12 RequestType=PKCS10 KeyUsage=0xa0 Silent=TRUE [EnhancedKeyUsageExtension] OID=1.3.6.1.5.5.7.3.1
- Open a command prompt.
- Change the directory to the C:\ path.
- Type in the following command:
C:\>certreq -new CSRParameters.inf CSROutput.pem
- Open Windows Explorer and browse to the C:\ directory to locate the CSROutput.pem file.
- Using the CSROutput.pem file, go back to the certificate authority and use the file to request your certificate.
- Install the certificate:
- Download the certificate as a .crt file
- On the server, open a command prompt.
- Navigate to the directory that contains the CRT file (C:\ in this example).
- Enter the following command (substitute mail.example.com.crt for the actual name of the .crt file you received from the certificate authority):
C:\>certreq -accept mail.example.com.crt
- The certificate will now be available in MDaemon when SSL/HTTP configurations have been created.
- Open CSR file with Notepad or Wordpad, copy all and paste into this tool can test CSR is valid and accurate or not: https://cryptoreport.websecurity.symantec.com/checker/views/csrCheck.jsp
- Copy the entries of CSR file and send it to VietNamHost , or paste it to the online SSL order screen on VietNamHost website.
See Mdaemon SSL Installation Instructions.
