Create a certificate signing request

The appliance uses a certificate for authentication over SSL. The certificate contains a public key, and the appliance maintains the corresponding private key, which is uniquely tied to the public key.

A certificate authority (CA) is a trusted party that issues a certificate that enables others, who trust the CA, to also trust the host. In essence, the CA vouches for the host.

Obtaining a CA-authenticated certificate

  1. Create a certificate signing request.

  2. Send the certificate signing request to the CA. The CA designates how and where to send the request.

  3. The CA authenticates the requester.

  4. Import the certificate.

Prerequisites

  • Minimum required session ID privileges: Infrastructure administrator

  • Required attributes:

    • Country

    • State or province

    • City or locality

    • Organization name

    • Common name (fully qualified host name of the appliance)

    • Certificate authority challenge password

    • Certificate authority unstructured name

Creating a certificate signing request using REST APIs

POST /rest/certificates/https/certificaterequest

Next step: After you receive the certificate from the CA, import the certificate. See Import a certificate.