2.2.4.1.4.2 Creating a CSR From OCLM Node

Perform the following procedure to create a CSR from an OCLM node:

  1. From the main menu, navigate to Administration, General Options, and set Enable OCLM Feature to 1.
  2. Configure Certificate Lifecycle Manager Config.
  3. From the Certificate Management page, click Create CSR from OCLM Node.
  4. From the Create CSR CLM Node page, enter the 2 character country code.
  5. Enter the full name of the State or Province.
  6. Enter the Locality name.
  7. Select the Common Name for the entity being included in the CSR.
  8. Enter the entity Organization.
  9. Enter the certificate Validity (in days).
  10. In the Subject Alternative Name section, select whether Critical is enabled or disabled.
  11. Enter one or more IP Addresses, if required. Click Add to add another IP address row.
  12. Enter one or more DNS Names, if required. Click Add to add another DNS name row.
  13. In the Key Usage section, select whether Critical is enabled or disabled.
  14. Select the Key Usage Values.
  15. In the Extended Key Usage section, select whether Critical is enabled or disabled.
  16. Select the Extended Key Usage Values.
  17. Click Generate CSR to submit the information to the OCLM node.
  18. Click Back to return to the Certificate Management page.

Note:

When the selected Common Name matches the subject CN of an existing OCLM managed certificate, the form is prefilled from that certificate. Prefilled values include Country, State or Province, Locality, Organization, Subject Alternative Name IP Addresses, Subject Alternative Name DNS Names, Key Usage values, Extended Key Usage values, and the critical flags for these extensions. If no matching OCLM managed certificate is found the default form values are used.