Certificate Services Support

Pre-requirements:

• OpenSSL version 0.9.8n (Recommend version 1.0.2)
• Apache HTTP Server 2.5

Here is the Solution:
The process below will guide you through the steps of creating a Private Key and CSR
Launch the OS Terminal or Command Prompt:

Part 1 of 2: Creating an ECC private key

Type the following command:
 
Openssl ecparam –out <your keyname> –name prime256v1 –genkey
 
Example:

 PLEASE NOTE: Replace "mykey.key" with your own values 

Part 2 of 2: Generating a CSR

Type the following command:
 
OpenSSL req –new –sha256 –key <your keyname> -nodes –out <your CSR filename>
 
Example:

 
Once prompted for a "Common Name" enter the Fully Qualified Domain Name (FQDN) that you wish to secure in the certificate
For Wildcard: If you are going to be requesting a Wildcard Certificate you will need to place an asterisk * in front of the domain (e.g. *.entrust.com)
You will also be prompted for the following information:
 

 
PLEASE NOTE: Do not use a Challenge Password
 
* If you require an Organization Unit, the value you place will be required to pass verification. If the OU is considered misleading or a registered trademark to a different legal entity it will be removed from certificate that is issued and show up with no value.
 

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance: 

Hours of Operation: 
Sunday 8:00 PM ET to Friday 8:00 PM ET 
North America (toll free): 1-866-267-9297 
Outside North America: 1-613-270-2680 (or see the list below) 
NOTE: Smart Phone users may use the 1-800 numbers shown in the table below.
Otherwise, it is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.