User`s guide
421
Entity
Instance
Parameter
Values
Equivalent Web Parameter
creq 0 commonname String Common Name (CN)
creq 0 country String Country Code (C)
creq 0 state String State or Province (ST)
creq 0 locality String Locality (L)
creq 0 orgname String Organisation (O)
creq 0 org_unit String Organisational Unit (OU)
creq 0 email Email Address E-Mail
creq 0 unstructname String Unstructured Name
creq 0 digest MD5 or SHA1 Digest Algorithm
The creq command can also be used to generate the certificate request using the
configured parameters. If the private key does not already exist and appropriate parameters
are entered, the key will be generated at the same time.
To generate a certificate request, enter the command:
creq new -k<priv key file> -o<cert request file>
To generate a private key and a certificate request, enter the command:
creq new –b<priv key length> -k<priv key file> -o<cert req file>
For example, to generate a certificate request file called “request.pem” from a private key
called “priv001.pem”, enter:
creq new -kpriv001.pem -o request.pem
To generate a 512 bit private key called “private.pem”, and generate a certificate request
called “certreq.pem” using that file, enter:
creq new -b512 -kprivate.pem -ocertreq.pem
Key Generation
Administration -> X.509 Certificate Management> Key Generation
This page allows you to generate a private key. A private key must be created before a
certificate can be requested as it is used in the request.
Key filename
Enter a name for the private key (the filename must be prefixed with “priv” and have a
“.pem” extension).
Key size
The size of the private key in bits. The key size can be one of the following
• 384
• 512
• 768
• 1024
• 1536
• 2048