Requesting an SSL Certificate

Purpose

These instructions outline the process for using the Cert Manager to request and download an SSL Certificate on your systems for your perusal.

Process

1. Go to the SSL Certificate Service Page and select "Request SSL Certificate" 
2. Click the Certificate enrollment link. The SSL Enrollment page appears. 
3. On the SSL Enrollment page:
   • Type “UTD” in the Access Code field 
   • Enter your UTD email address in the Email field
   • Click the Check Access Code button. 
4. Follow the on-screen instructions. 
5. Specify a Certificate Type of “InCommon SSL”, “InCommon Intranet SSL” or “InCommon Multi-Domain SSL”. 
6. Type in the Common Name (FQDN – e.g. pits.utdallas.edu) or click on Get Common Name from CSR. 
   NOTE: If you choose InCommon Multi-Domain SSL, select the Common Name first, then add a comma-and-space separated list of the alternate hostnames.
7. Select the Server Type and Certificate Term. 
8. Paste in the CSR (must be at least 2048 bits) and complete the form. NOTE: Refer to the following page for instructions on converting an IIS certificate from 1024 bits to 2048 bits: https://www.geocerts.com/support/iis_upgrade_key_size. 
9. The passphrase is one of your choosing, but you will not normally be prompted for it. Notification will initially be sent to the email address you entered when the certificate is ready for download. The download page will allow you to select the certificate type from a list (typically X509, Base64 encoded). NOTE: IIS requires a PKCS#7 certificate in binary form. When you have downloaded the certificate, rename it from my_cert.p7b to my_cert.cer before attempting to import it into IIS.