1. Developing and Deploying Siebel CRM
  2. Generating a Certificate Request

Generating a Certificate Request

Regardless of the certificate authority (CA) type that you plan to use, you need to generate a certificate request. A simple way to do this is with the keytool utility included in the Java Development Kit (JDK) as shown in the following example.

Before you start

The following procedure assumes that the JDK has been installed and that the bin folder is in the current path.
Note: There are other tools available to generate certificate requests; the following procedure is one option available to you.

Here's what to do

  1. Open a command prompt window.
  2. Execute the following commands:

    1. x:

      Change to the drive where you plan to install Siebel, for example C: or D:. (Windows only).

    2. cd \

      Makes sure that you are at the root of the folder. For Linux/Unix, select the appropriate base path where you will eventually install Siebel.

    3. mkdir Siebel

      Creates a Siebel folder. You use this folder as a base for the entire Siebel CRM installation, keeping everything in one place.

    4. mkdir Siebel\Keys

      Creates a folder under the /Siebel folder in which you will create the keystores.

    5. cd Siebel\Keys

      Changes the current directory to the newly created Siebel\Keys folder.

    6. keytool -genkey -alias siebel -keystore .\siebelkeystore.jks -keyalg RSA -sigalg SHA256withRSA -keysize 2048 -validity 1825 -dname "cn=myserver.company.com"Creates a keystore for the server: myserver.mycompany.com

      You must replace all occurrences of this with the actual server name. The validity attribute key is valid for 5 years (1825 days), you can change this value as appropriate.

      Note: You will be prompted for two passwords — one for the key and one for the keystore. Due to downstream dependencies, these passwords must be the same. Note these passwords carefully, as they are required several times during the installation process.

    7. keytool -list -v -keystore .\siebelkeystore.jksVerifies that the keystore was created and checks for obvious errors.

    8. keytool -certreq -alias siebel -keystore .\siebelkeystore.jks -file .\certreq.csr Generates a certificate signing request (CSR). This will be provided to your CA to get an actual certificate.