To create the certificate request for the internal interface
- In the Deployment Wizard, on the
Deploy Edge Serverpage, next to
Step 4: Configure Certificates for the Edge Server, click
Run.
- On the
Welcomepage of the Communications Certificate Wizard, click
Next.
- On the
Available Certificate Taskspage, click
Create a new certificate, and then click
Next.
- On the
Select the Component for Which the Certificate Is
Requestedpage, select
Edge Server Private Interface, and then click
Next.
- On the
Delayed or Immediate Requestpage, select the
Prepare the request now, but send it latercheck box, and
then click
Next.
Note: If the Enterprise CA is reachable from the Edge Server, you can use the Send the request immediately to an online certification authorityoption. Since this is typically not the case, this procedure and other certificate request procedures in this guide do not cover the use of that option. Additionally, be aware that once you create a request, it is pending and the Certificate Wizard will not let you create another request until you have processed the pending one. - On the
Name and Security Settingspage, type a friendly name for the
certificate, and specify the bit length (typically, the default of
1024), verify that the
Mark certificate as exportablecheck box is selected, and
then click
Next.
- On the
Organization Informationpage, type the name for the
organization and the organizational unit (such as a division or
department, if appropriate), and then click
Next.
- On the
Your Server's Subject Namepage, type or select the subject
name and subject alternate name of the Edge Server.
The subject name should match the fully qualified domain name (FQDN) of the Edge Server published by the internal firewall for the internal interface on which you are configuring the certificate. For the internal interface of the Edge Server, this subject name should match the name that your internal servers use to connect to the Edge Server (typically, the FQDN of the internal interface for the Edge Server). For Litware Inc., this value is ocsedge.litwareinc.com. - Select
Automatically add local machine name to subject alternate
nameif you would like to add the computer name of the Edge
Server to the certificates list of alternate names.
- Click
Next.
- On the
Geographical Informationpage, type the location information,
and then click
Next.
- On the
Certificate Request File Namepage, type the full path and
file name to which the request is to be saved in the
File namebox (for example,
C:\certrequest_AccessEdge.txt), and then click
Next.
- On the
Request Summarypage, click
Next.
- On the wizard completion page, verify successful completion,
and then click
Finish.
- Submit this file to your CA (by e-mail or other method
supported by your organization for your Enterprise CA) and, when
you receive the response file, copy the new certificate to this
computer so that it is available for import.