Generating a Certificate Signing Request

1. From the Home tab, select System > System Settings.

2. On the System Settings page, select Settings > Certificates.
3. On the Services tab, select a service, and then select Actions > Generate CSR.

4. On the Generate CSR page Details tab, complete the following information:

   Field Name	Description
   Common Name	The FQDN used for DNS lookups.
   Locality	Optional. The city.
   State	Optional. For US and Canadian countries, enter the full state or province name. Do not abbreviate.
   Country	The 2-character ISO format country code.
   Organization	Optional. The company name.
   Organization Unit	Optional. The section name in the company.
   Key Size	Select 2048-bit or 4096-bit.

5. Click Continue.

6. On the SAN tab, you can add subject alternative host names and addresses to the certificate.

   The DNS name and IP address that you used when deploying CloudControl are displayed by default. You can have up to 16 DNS names and 16 IP addresses. To add additional subject alternative names: 

   1. Click the Create button.

   2. On the Subject Alternative Name window, select either DNS Name or IP Address and add the value in the field.

      For the DNS name, you can also use wildcards before the domain name, for example, *.example.com.

   3. Click OK.
7. Click Continue.

8. In the confirmation box, click Continue.

   At this point, you can send the CSR to your signing authority to get a signed certificate.

What to Do Next 

After you receive the SSL certificate from your signing authority, you will need to install it. See Installing an SSL Certificate.