How-To: Create an SSL Certificate in Windows, Mac, or Linux

Prerequisites

1. Register Domain

Overview

This page guides you through how to create a certificate signing request (CSR) on your Windows, Mac, or Linux PC and sending it to EZCA to create a TLS Certificate.

How To Request a Certificate

1. Navigate to https://portal.ezca.io/
2. Navigate to Domains.
3. Click the “Request Certificate” button on the domain you want to request a certificate for.
4. This will pre-populate the Subject Name and Subject Alternate Names with the selected domain.
5. If this certificate requires more subject alternate names (Usually for other domains that might use this certificate), add them in the DNS Names section.
6. By Default, EZCA will request the certificate to be the maximum validity allowed by your administrators. If you want to decrease the lifetime of the certificate, adjust the validity slider.
7. Make sure the “Import CSR” Option is Selected.
8. Click the “How to create a CSR Locally” Link.
9. Select your Operating System

How To Create CSR in Windows

1. Download the .inf file

2. open cmd.exe

1. Navigate to your downloads folder and run the following command where INFFILENAME is the file name you just downloaded and CSRFILENAME is the file where you want the certificate signing request to be saved:

   certreq.exe -new <INFFILENAME>.inf <CSRFILENAME>.csr
   

   
2. Go Back to the EZCA portal.
3. Close out the instructions dialog.
4. Click on the “Upload CSR” button.
5. Select the newly created CSR file
6. Click the “Request Certificate” button at the top right of the form.
7. Your Certificate has been created successfully

How To Create a CSR in Linux/Mac

1. Copy the command generated by EZCA. Sample command:

   openssl req -new -newkey rsa:4096  -keyout certificate.key -out certificate.csr -subj /CN=ezssh.io
   

2. Paste the command into Terminal and press enter.
3. Enter a strong pass phrase to encrypt the private key that the computer is generating (You will need this pass phrase to use the certificate)
4. In the same terminal window enter:

   cat certificate.csr 
   

   this will print the Certificate Signing Request into the terminal.
5. Copy the output including —–BEGIN CERTIFICATE REQUEST—– and —–END CERTIFICATE REQUEST—–
6. Paste it into EZCA under the “Enter CSR Body” section.
7. Click the “Request Certificate” button at the top right of the form.
8. Your Certificate has been created successfully
9. Next Steps: How To Install SSL Certificate