earth_america
user_standard Connexion
action_search_stroke
earth_america
Log on to rate and give feedback 1 2 3 4 5 Log on to rate
0
Comment faire pour

Comment faire pour


Produits : AS-B, Edge Server, Enterprise Central, Enterprise Server, AS-P, Project Configuration Tool
Fonctionnalités : Sécurité
Version produit : 2024, 7.0
02/12/2024

Generating a Certificate Signing Request (CSR)

You generate a CSR in order to apply for a server certificate. The procedure describes how to generate a CSR using OpenSSL.

Afficher plus
action_close

Use this workflow to purchase, convert and install CA server certificates using WorkStation.

Related information can be found in the sections after the flowchart.

 
action_zoom_plus_stroke Server certificate workflow
Figure : Server certificate workflow
Configure the DNS name for the EcoStruxure BMS server

You must configure the DNS name for the EcoStruxure BMS server to prevent the certificate from being locked down to a specific IP.

Install OpenSSL

Download and install OpenSSL.

OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.

OpenSSL is used when you generate a Certificate Signing Request (CSR). OpenSSL is also used when converting CRT or CER files to PEM files.

Generate a Certificate Signing Request (CSR)

Before you can order an SSL Certificate, you will need to generate a CSR if you want to generate your private key yourself.

The CSR contains information, for example, common name, organization, and country, that the Certificate Authority (CA) will use to create your certificate. It CSR also contains the public key that will be included in your certificate and is signed with the corresponding private key.

Pour plus d'informations, voir Generating a Certificate Signing Request (CSR) .

Purchase the CA certificate

Purchase SSL certificate through a certificate authority. Provide the created CSR to the certificate authority.

You then receive the certificate in CRT, CER or PEM format.

Convert CRT or CER files to PEM files

EcoStruxure BMS only supports PEM format. You must convert all CRT or CER files to PEM.

Pour plus d'informations, voir Converting CRT or CER files .

Add the Certificate

Add the certificate to the EcoStruxure BMS server.

Pour plus d'informations, voir Adding a Certificate using WorkStation .

Activate the Certificate

Activate the certificate.

Pour plus d'informations, voir Activating a Certificate Using WorkStation .

Verify the Connection

Verify that the connection to WebStation is secure by accessing the EcoStruxure BMS server via HTTPS.

To generate a Certificate Signing Request (CSR)

  1. Open the Command prompt in Windows as an administrator.

  2. Change directory to OpenSSL by running command “cd c:\program files\OpenSSL-Win64\bin"

  3. Press Enter .

  4. Type "openssl req -new-newkey rsa:2048 -nodes -keyout EcoStruxure.key -out Ecostruxure.csr"

  5. Press Enter .

  6. Follow the prompts to fill out the information for the CSR.

  7. Supply CSR, other certificate contact information, and a means of validating the request to the third-party CA.

Voir aussi

  • Certificates
  • WorkStation Server CA Certificate Workflow
  • Generating a Certificate Signing Request (CSR)
  • Converting CRT or CER files