Creating a New Server Certificate

Here are the steps for creating a new server (host) certificate.

1.

Create a new certificate request. Click on the ``Requests'' tab and then click on the ``New'' button.

2.

For the common name, enter host/hostname.extreme.indiana.edu, substituting ``hostname'' as appropriate. Note, Globus Toolkit expects the common name of a host certificate to begin with the ``host/'' string, so this is essential¹.

3.

Enter a password of temp. It's okay that it isn't a good password since we'll be storing them without the password encrypted but readable only by root on the machines we issue them on. This is the standard Globus way of doing things.

4.

Leave the defaults and click OK.

5.

Sign the request. Click on the certificate request just generated and then click on the ``Server'' button.

6.

You'll be prompted for the password. For security reasons, the password is not given in this documentation. See the CA administrator (currently Marcus Christie) for further information.

7.

This generates the certificate and the key which can be viewed in their respective tabs.