Installation guide
36 ZENworks 11 Server Installation Guide
When you are asked for “YOUR name,” enter the full DNS name assigned to the server where
you are installing ZENworks 11 .
3 To convert the private key from PEM format to DER format, enter the following command:
openssl pkcs8 -topk8 -nocrypt -in zcm.pem -inform PEM -out zcmkey.der -outform
DER
The private key must be in the PKCS8 DER format, and the signed certificate must be in the
X.509 DER format. You can use the OpenSSL command line tool to convert your keys to the
proper format. This tool can be obtained as part of the Cygwin toolkit, or as part of your Linux
distribution.
4 Use the CSR and generate a certificate by using Novell ConsoleOne, Novell iManager or a true
external CA such as Verisign.
“Generating a Certificate by Using Novell ConsoleOne” on page 36
“Generating a Certificate by Using Novell iManager” on page 37
Generating a Certificate by Using Novell ConsoleOne
1 Ensure that eDirectory is configured as the CA.
2 Issue the certificate for the Primary Server.
2a Launch Novell ConsoleOne.
2b Log in to the eDirectory tree as an administrator with the appropriate rights. For more
information about the appropriate rights, see the Entry Rights Needed to Perform Tasks
section in the Certificate Server documentation at the Novell Documentation Web site (http:/
/www.novell.com/documentation).
2c From the Tools menu, click Issue Certificate.
2d Browse for and select the
zcm.csr
file.
2e Click Next.
2f Complete the wizard by accepting the default values.
2g Specify the certificate basic constraints, then click Next.
2h Specify the validity period, the effective and expiration dates then click Next.
2i Click Finish.
2j Choose to save the certificate in the DER-format, and specify a name for the certificate.
3 Export the Organizational CA's self-signed certificate.
3a Log in to eDirectory from ConsoleOne.
3b In the Security container, right-click the CA, then click Properties.
3c In the Certificates tab, select the self-signed certificate.
3d Click Export.
3e When prompted to export the private key, click No.
3f Export the certificate in DER format and choose the location in which you want to save the
certificate.
3g Click Finish.
You should now have the three files that you need to install ZENworks using an external CA.