Knowledge Base

Create a CSR & install your SSL certificate using the DigiCert® Certificate Utility for Windows

These instructions assume that you already own your IBM Bluemix account, and that you have configured the custom domain for your application. For more information, visit IBM Cloud Bluemix. If you need instructions for IBM Watson IoT Platform, see IBM Watson IoT Platform: Create CSR & Install Messaging Server SSL Certificate for Your Watson IoT Organization (DigiCert Utility).

Use the instructions on this page to create your certificate signing request (CSR) and then to install your SSL certificate.

For a simpler way to create your CSRs (Certificate Signing Requests) and install and manage your SSL certificates, we recommend that you use the DigiCert® Certificate Utility for Windows. For more information about our utility, see DigiCert® Certificate Utility for Windows.

1. To create your certificate signing request (CSR), see IBM Bluemix: Creating Your CSR with the DigiCert Utility.

2. To install your SSL certificate, see IBM Bluemix: Using the DigiCert Utility & Bluemix Console to Install Your SSL Certificate.

If you don't have access to a Microsoft server or workstation, prefer not to use the DigiCert Utility, or for some reason cannot use the utility, see IBM Bluemix: Create CSR & Install SSL Certificate (OpenSSL).
 

I. IBM Bluemix: Creating Your CSR with the DigiCert Utility

The DigiCert® Certificate Utility for Windows streamlines the CSR creation process enabling you to generate the CSR with just one click.

How to Create Your CSR with the DigiCert Utility

1. On your Windows machine, download and save the DigiCert® Certificate Utility for Windows executable (DigiCertUtil.exe).

2. Run the DigiCert Certificate Utility.

3. Double-click DigiCertUtil.

4. In the DigiCert Certificate Utility for Windows©, click SSL (gold lock), and then, click Create CSR.

   

5. On the Create CSR page, enter the following information:

   Certificate Type:	Select SSL.
   Common Name:	Enter the fully qualified domain name (FQDN) (e.g., www.example.com).
   	You may also enter the IP address.
   Subject Alternative Names:	If you are requesting a Multi-Domain (SAN) Certificate, type any SANs that you want to include.
   	(e.g., www.example.com, www.example2.com, and www.example3.net)
   Organization:	Type your company's legally registered name (e.g., YourCompany, Inc.).
   Department:	(Optional) Enter the department within your organization that you want to appear on the SSL certificate.
   City:	Type the city where your company is legally located.
   State:	In the drop-down list, select the state where your company is legally located.
   	If your company is located outside the USA, you can type the applicable name in the box.
   Country:	In the drop-down list, select the country where your company is legally located.
   Key Size:	In the drop-down list, select 2048.
   Provider:	In the drop-down list, select Microsoft RSA SChannel Cryptographic Provider,
   	unless you have a specific cryptographic provider.

   

6. Click Generate.

7. On The certificate request has been successfully created page, do one of the following, and then, click Close:

   Click Copy CSR.	Copies the certificate contents to the clipboard.
   	If you use this option, we recommend that you paste the CSR into a tool such as Notepad.
   	If you forget and copy some other item, you still have access to the CSR, and you do not have to go back and recreate it.
   Click Save to File.	Saves the CSR as a .txt file to the Windows server or workstation.
   	We recommend that you use this option.

   

8. Use a text editor (such as Notepad) to open the file. Then, copy the text, including the -----BEGIN NEW CERTIFICATE REQUEST----- and -----END NEW CERTIFICATE REQUEST----- tags, and paste it into the DigiCert order form.

9. After you receive your SSL certificate from DigiCert, you can install it.
    

II. IBM Bluemix: Using the DigiCert Utility & Bluemix Console to Install Your SSL Certificate

If you have not yet used the DigiCert® Certificate Utility for Windows to create a CSR and ordered your certificate, see IBM Bluemix: Creating Your CSR with the DigiCert Utility.

After receiving your SSL certificate, you need to upload it upload it to your IBM Bluemix account and configure your application to use it.

To install your IBM Bluemix SSL certificate, complete the steps below.

1. Import your SSL certificate to your Windows server using the DigiCert® Certificate Utility for Windows.

   How to Import Your SSL Certificate Using the DigiCert Certificate Utility

2. Export the SSL certificate in Apache compatible format (separate .key and .crt files) using the DigiCert® Certificate Utility for Windows.

   How to Export Your SSL Certificate in Apache Compatible Format Using the DigiCert Certificate Utility

3. Upload and implement your SSL certificate using the IBM Bluemix Management Console.