Error while generating CSR

[reshma_km]

Hi,

This is a question regarding Generating Certificate Signing Requests for Trusted Certificates

I downloaded the openssl from the below link as mentioned in the comments:

https://slproweb.com/products/Win32OpenSSL.htm

The file I installed was the highlighted one below.

I followed the steps to create CSR, but after pasting the command from Digicert, I got a warning and nothing was generated.

I don't see any openssl.conf file in my server. Of course I understand that I installed a different file than the one mentioned in the document (as the link in the document was not working).

Could you please help me?

[JustinDallas]

It looks like your command was designed to run on a Linux system

/usr/local/ssl/openssl.cnf is a Linux path.

[reshma_km]

Oh... Thanks for the input.

So now what can I do to correct this? Did I install the wrong file?

[JustinDallas]

I'm not sure what your next step should be.  When I've generated my CSRs to get my SSL keys, I didn't have to use another program.  Maybe there is a directory/file setting that you have to set, and it's using the Linux path (/usr/local...) as the default?

[reshma_km]

Ok Justin.

Could you please tell me how did you generate the CSR?

[JustinDallas · Accepted solution]

This following website is what I used to generate the CSR.  I then took that CSR, and gave it to the other IT folks who then sent it to the domain host (GoDaddy I think).  The host sent back the certificate which I then installed.

How to generate Certificate Signing Request using Microsoft Management Console (MMC) on Windows 2012...

[reshma_km]

Thanks a lot.

This is not specific to IIS, right? I am planning to get a verisign certificate.

[JustinDallas]

No, this has nothing to do with IIS.  It has to do with the Windows certstore which is completely different from IIS.  I'm not sure about how Verisign does their thing, but even if they give you a cert, you can still install it and then use it in Qlik.

[reshma_km]

Ok. Thank you.

[reshma_km]

So, after getting the certificate, the procedure to install them is as described in https://help.qlik.com/en-US/sense/November2017/Subsystems/ManagementConsole/Content/change-to-signed...

Is that right?