How to Generate Certificate Signing Request on OS X Mavericks

Mac OS X Mavericks: CSR Creation Using the Server App

To get a valid SSL Certificate, you must first generate a CSR (certificate signing request). Then, you will use the contents of the CSR to order your SSL Certificate. Once you receive your SSL Certificate, you can then install it.

Mac OS X Mavericks Server (10.9): How to Generate a CSR Using the Server App

1. Open the Server App.

   In the Finder window, under Favorites, click Applications and then double-click Server.

   
2. In the Server window, do one of the following options to select the server on which you want to create your CSR.

   Note: You should select the server on which you are going to eventually install this SSL Certificate.

   • To create the CSR on this server
     1. Select This Mac – YourServerName and then click Continue.
     2. Enter your Administrator Name and Administrator Password and then click Connect.
   • To create the CSR on another server
     1. Select Other Mac and then click Continue.
     2. Enter your Host Name or IP Address, your Administrator Name and Administrator Password, and then click Connect.
   
3. In the Server window, under Server, click Certificates.
4. 
5. On the Certificates page, click + > Get a Trusted Certificate.
6. 
7. On the Get a Trusted Certificate page, click Next.
8. 
9. Enter the following information:

   Host Name:	Enter the name to be used to access the certificate. This name is usually the fully qualified domain name (FQDN).
   	For example, www.yourdomain.com o... Email Address:	Enter an email address at which you can be contacted.
   Company or Organization:	Enter the legally registered name of your organization or company.
   Department:	Enter the name of your department within the organization. For example, you can enter ITor Web Security.
   Town or City:	Enter the town or city where your organization or company is located.
   State or Providence:	Enter the state or providence where your organization or company is located.
   Country:	In the drop-down list, select the country where your organization or company is located.

   
10. To generate your CSR, click Next.
11. Click Save and save the CSR, making sure to note the filename and location of the file.
12. 
13. Click Finish.
14. 
15. Use a text editor (such as TextEdit) to open the file. Then, copy the text, including the -----BEGIN NEW CERTIFICATE REQUEST----- and -----END NEW CERTIFICATE REQUEST----- tags, and enter it into the order form.

    Note: During your SSL Certificate ordering process, make sure that you select OTHER when asked to Select Server Software. This option ensures that you receive all the required certificates for Mac OS X Mavericks SSL Certificate Installation (Intermediate and SSL Certificates).

    
16. After you receive your SSL Certificate, you can install it.

Mac OS X Mavericks: Installing Your SSL Certificate

Installing the Certificate

1. Open the ZIP file containing your SSL Certificate and save the SSL Certificate file (yourdomain_com.crt) to the desktop of your Mac server.

   Keep this folder open so that you can readily access your SSL Certificate (yourdomain_com.crt) and the XYZ RSA Intermediate Certificates (ex: XYZRSA.crt) files.

   
2. Open the Server App.

   In the Finder window, under Favorites, click Applications and then double-click Server.

   
3. In the Server window, do one of the following actions to select the server on which you want to install your SSL Certificate.

   Note: You should select the server on which you created the CSR.

   • To install the certificate on this server
     1. Select This Mac – YourServerName and then click Continue.
     2. Enter your Administrator Name and Administrator Password and then click Connect.
   • To install the certificate on another server
     1. Select Other Mac and then click Continue.
     2. Enter your Host Name or IP Address, your Administrator Name and Administrator Password, and then click Connect.
   
4. In the Server window, under Server, click Certificates.
5. 
6. On the Certificates page, double-click on the Pending certificate that you created when generating the CSR.
7. On your certificates page (i.e. www.yourdomain.com), under Certificate Files, in the Drag files received from your certificate vendor here box, drag-and-drop your SSL Certificate (yourdomain_com.crt) and the XYZRSA.crt files.

   Hold down the command key, select both files, and then drag them to the box and drop them.

   
8. Click OK.

Assigning the Certificate

1. In the Server window, under Server, click Certificates.
2. 
3. On the Certificates page, in the Secure services using drop-down list, select Custom.
4. In the Service Certificates window, in the Certificate drop-down list, select your new SSL Certificate for each Service to which you want to assign it.

   For example, in the Certificate drop-down list for Websites (Server Website – SSL) select your new SSL Certificate.

   
5. When you are finished, click OK.
6. Your SSL Certificate should now be installed and assigned to your respective Services.