To generate a Certificate Signing Request (CSR) for Mac OS X Server (Yosemite or El Capitan), follow these steps:
-
Open Keychain Access: Launch the Keychain Access application on your Mac.
-
Create a New Certificate Request:
- In the Keychain Access window, click on the "+" button.
- Select "Get a trusted certificate" and click "Next".
-
Fill in CSR Details:
- Host Name: Enter the domain name you wish to secure (e.g., example.com or *.example.com for wildcard).
- Contact Email Address: Provide an email for the administrator.
- Company/Organization: Include your company name, or "NA" if none.
- Department: Specify your department (e.g., IT) or "NA".
- Location Details: Enter city, state, country, and other required geographical information.
-
Avoid Special Characters: Refrain from using characters like ~, ,, etc., to prevent issues during activation.
-
Generate CSR:
- After filling in the details, click "Next" to generate the CSR.
- Click "Save" to save the .csr file. Typically saved in a specific location on your server.
-
Submit to CA: Use the generated CSR to apply for an SSL certificate from your Certificate Authority (e.g., Esadax).
-
Verify Domain Control:
- Ensure you have control over the domain by using a fully qualified domain name.
- Avoid using "localhost" or "127.0.0.1" as these may not be recognized.
-
Check Permissions: Confirm that your CA can access the requested domains and has the necessary permissions.