Create a Certificate Locally

Prerequisites

  1. Register Domain

Overview

EZCA guides you on how to create your certificate signing request (CSR) in the desired computer and then upload it to EZCA to request the certificate.

Requesting The Certificate

  1. Navigate to https://portal.ezca.io/
  2. Navigate to Domains. Domains Menu
  3. Click the “Request Certificate” button on the domain you want to request a certificate for. Domains Menu
  4. This will pre-populate the Subject Name and Subject Alternate Names with the selected domain. Create Certificate
  5. If this certificate requires more subject alternate names (Usually for other domains that might use this certificate), add them in the DNS Names section.
  6. By Default, EZCA will request the certificate to be the maximum validity allowed by your administrators. If you want to decrease the lifetime of the certificate, adjust the validity slider. Create Certificate
  7. Make sure the “Import CSR” Option is Selected. Create Certificate
  8. Click the “How to create a CSR Locally” Link. Create Certificate
  9. Select your Operating System Create Certificate

Create CSR Windows

  1. Download the .inf file Create Certificate
  2. open cmd.exe
  3. Navigate to your downloads folder and run the following command where INFFILENAME is the file name you just downloaded and CSRFILENAME is the file where you want the certificate signing request to be saved:
    certreq.exe -new <INFFILENAME>.inf <CSRFILENAME>.csr
    Create Certificate
  4. Go Back to the EZCA portal.
  5. Close out the instructions dialog.
  6. Click on the “Upload CSR” button. Create Certificate
  7. Select the newly created CSR file Create Certificate
  8. Click the “Request Certificate” button at the top right of the form. Create Certificate
  9. Your Certificate has been created successfully Create Certificate

Create CSR Linux/Mac

  1. Copy the command generated by EZCA. Create Certificate Sample command:
    openssl req -new -newkey rsa:4096  -keyout certificate.key -out certificate.csr -subj /CN=ezssh.io
  2. Paste the command into Terminal and press enter. Create CSR Mac
  3. Enter a strong pass phrase to encrypt the private key that the computer is generating (You will need this pass phrase to use the certificate)
  4. In the same terminal window enter:
    cat certificate.csr
    this will print the Certificate Signing Request into the terminal. Create CSR Mac
  5. Copy the output including —–BEGIN CERTIFICATE REQUEST—– and —–END CERTIFICATE REQUEST—–
  6. Paste it into EZCA under the “Enter CSR Body” section. Create CSR Mac
  7. Click the “Request Certificate” button at the top right of the form. Create Certificate
  8. Your Certificate has been created successfully Create Certificate
  9. Next Steps: How To Install SSL Certificate