Generating a certificate signing request file using the iKeyman tool

If you require an authorized certificate from a trusted third-party certificate authority, you can use the iKeyman tool to generate the required Certificate Signing Request.

Procedure

  1. Log on to the reporting server as a user with administrative privileges.
  2. Start iKeyman by running the following command: IHS_root/bin/ikeyman

    Where IHS_root is the location of the IBM® HTTP Server installation. The default location is /usr/IBM/HTTPServer/.

  3. In the iKeyman tool, open the keystore created in Step 2.
    1. Select Key Database File > Open.
    2. Specify the type of keystore. The default type is CMS.
    3. In the File Name and Location fields, enter the name and path to the keystore. You can also click Browse to locate the keystore, and click OK.
    4. In the Password Prompt dialog box, enter the password for the keystore, and click OK.
  4. Generate the certificate request for the open keystore.
    1. Select Create > New Certificate Request.
    2. In the Create New Key and Certificate Request dialog box, in the Key Label field, provide an identifier for the certificate.
    3. In the Key Size list, select a key length for the certificate. The key size determines the strength of the encryption.
    4. From the Signature Algorithm list, select an algorithm to apply to the certificate.
    5. Provide the dname information to identify the certificate. Enter the values as appropriate.commonName organization organizationUnit localityName stateName country
    6. Click OK to generate the request. A certificate request in the .arm format is created and saved to the specified location.