Request an SSL certificate / InCommon

Problem

I need help requesting an SSL certificate for a web server through InCommon-CERTInext Certificate Service
How do I request an SSL certificate?

Prior to making a certificate request, you must create a CSR (certificate signing request)
Certificate requests can be made from the following submission links. Select the link for the certificate type needed. Each of these links provide certificates with the maximum allowed term, users with access to the CERTInext portal may request certificates with different term periods from within the portal. If you don't already have an authentication token to access the following links, reach out to ISO for one:

Upload or copy/paste the CSR and click Next
The validated Miami University organization should be pre-selected, so just click Next
Select either New or Existing user as the representative requesting the certificate
- If New, provide your Name in the Name field and email address in the Email ID field
- If Existing, select yourself from the drop down list
If the certificate should be downloaded by someone other than the requester add a Contact name and email address for the person and click Next, otherwise just click Next
Confirm the Certificate Information looks correct, especially the Domain Name at the bottom which should be the FQDN (Fully Qualified Domain Name) of the site the certificate is for, and click Next
- If the domain name is incorrect and the correct one is not in the drop down list, you'll likely need to recreate the CSR with the correct FQDN
- If submitting a request for a multi-domain certificate select or add the additional domain names (Subject Alternative Names)
Complete the optional additional information as desired and click Next
Review the Order Summary and click Submit
Once you have received and installed your certificate, submit a request for a Nagios alert to track the service, ensuring that you are alerted before the certificate expires

Best Practice: SSL/TLS certificate guidelines
To ensure that all clients can verify the trust chain of the certificate, you must install the Intermediate CA Chains. See related articles for instructions on how to install Intermediate CA Chains
Miami is on a course to automate as much of our certificate generation and renewals as possible using ACME and certbot. If you're part of IT and would like to participate in our automation effort please reach out to the appropriate group for the underlying operating system EO (Linux) or the Windows team (Windows Servers). These groups will create, renew and distribute the certificate to your server for consumption so there is no need for you to create the CSR or submit the certificate request via InCommon

0 reviews