Oracle^® Rack Universal Power Distribution Unit User's Guide

Creating a CSR

1. Select Device Settings → Security → TLS Certificate.
2. Enter information in the Required fields.

   ---

   Note -  If you generate a CSR without values in the required fields, you cannot obtain third-party certificates.

   ---

   CSR Information Description Country Country where your company is located. Use the standard ISO country code. For a list of ISO codes, visit the ISO website (https://www.iso.org/iso-3166-country-codes.html). State or Province Full name of the state or province where your company is located. Locality City where your company is located. Organization Registered name of your company. Organizational Unit Name of your department. Common Name Fully qualified domain name (FQDN) of your HPDU device. Email Address Email address where you or another administrative user can be reached.

3. In the Miscellaneous section, enter information for Not valid before, Not valid after, Serial number, and Key length.
4. If you want a certificate to secure multiple hosts across different domains or subdomains, click + Add Name to add the DNS host names or IP addresses of the those hosts to this CSR so that a single certificate is valid for all of them.

   Examples of subject alternative names: support.company.com, help.company.com, help.company.net, and 192.168.77.50.

5. Select the key creation parameters.

   CSR Option Description Key Length Select an available key length (bits). A larger key length enhances the security, but slows down the HPDU device response. Only 2048 is available now. Self Sign For requesting a certificate signed by the CA, ensure this check box is not selected. Challenge, Confirm Challenge Type a password. The password protects the certificate or CSR. The value must be 4 to 64 characters long. Case sensitive.

6. Create a CSR and private key.
   1. Click Create New TLS Key.

      This might take several minutes to complete.

   2. Click Download Certificate Signing Request to download the CSR to your computer.
   3. At the prompt, click Save.
   4. Submit the CSR to a CA to obtain the digital certificate.
7. If the CSR contains incorrect data, click Delete Certificate Signing Request to remove it, and then repeat the Steps 1-5 to re-create it.
8. To store the newly-created private key on your computer:
   1. In the Active TLS Certificate section, click Download Key to download the private key of the currently-installed certificate, not the newly-created one.
   2. In the Subject Alternative Names, enter names.
9. When prompted, click Save.
10. Install the CA-signed certificate.