Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Create an X.509 Certificate

For creating the necessary certificates, you can use our portal or create certificates manually.

Create the certificate service request (csr)

Create a csr with our portal

We support you with generating an appropriate certificate under this URL: LINK

  1. Add your organization data in section 1

  2. Define your deployment scenario in section 2
    You must check the Keycloak and Camp option for every PoC

  3. Check the altnames in section 3.
    You may manually change them if you want different urls

  4. Generate an OpenSSL Config File or a CSR (“Certificate Signing Request”) in section 3.
    Your IT department will be able to generate a certificate using one of these two files. The Open SSL Config File allows to do manual changes if your IT department requires to do so.

    Alternatively, you can generate a CSR (“Certificate Signing Request”) based on your own OpenSSL config file in the upper right box on the same page.

Manually create csr

If you create the certificate manually, make sure they meet the following requirements.

  • Hostnames

    • The certificat must be issued on the hostnames

      • smartfacts.<domain-name>

      • camp.<domain-name>

      • identity.<domain-name>

      • genoslc.<domain-name>

      • oslc.<domain-name>

    • Hostnames must also be stored in the "Subject Alternative Name" (SAN) attribute of the certificate

    • All hostnames and subject alternative names must be written in lower case

Create the certificate

Ask your administration division for support in creating a certificate based on your csr. The Certificat must meet the following requirements:

...