Creating a new key pair and certificate request
You find key pairs and certificate requests stored in a key database. This section provides information on how to create a key pair and certificate request.
There are GSKit certificate support limitations that you should remember as you create a new key pair and certificate request:
- You cannot use ikeyman to create certificates with key sizes that are larger than 2048 bits.
- You can import certificates with key sizes up to 4096 bits into the key database.
To create a public and private key pair and certificate request...
- If we have not created the key database, see Creating a new key database for instructions.
- Start the ikeyman user interface.
- Click Key Database File from the main user interface, then click Open.
- Enter your key database name in the Open dialog box, or click the key.kdb file, if we use the default. Click OK.
- In the Password Prompt dialog box, enter your correct password and click OK.
- Click Create from the main user interface, then click New Certificate Request.
- In the New Key and Certificate Request dialog box, complete the following information:
- Key label: Enter a descriptive comment to identify the key and certificate in the database.
- Key size: Choose your level of encryptions from the drop-down menu.
- Organization Name: Enter your organization name.
- Organization Unit
- Zip code
- Country: Enter a country code. Specify at least two characters. Example: US Certificate request file name, or use the default name.
- Click OK.
- Click OK in the Information dialog box. A reminder to send the file to a certificate authority displays.
- Optional: On UNIX-based platforms, remove the end of line characters (^M) from the certificate request. To remove the end of line characters, type the following command:cat certreq.arm |tr -d "\r" > new_certreq.arm
- Send the file to the certificate authority (CA) following the instructions from the CA Web site for requesting a new certificate.
Managing keys with the ikeyman graphical interface (Distributed systems)