Generation of certificate signing requests.

Make sure each key that should have a CSR generated is selected.

Generate CSR

Column

Description

Key

The key alias of the key to generate the CSR for.

Signature Algorithm

The signature algorithm to use when creating the signature in the CSR (proof-of-possession).

By default, the signature algorithms can be selected from a drop-down list listing common algorithms. Note that some of these algorithms might not be supported by the crypto token used.

To specify a signature algorithm manually, click >.

Note that the algorithm must work with the key algorithm used (i.e. RSA or ECDSA).

Examples:

  • SHA256withRSA
  • SHA256withECDSA

DN

Subject DN to include in the CSR.

Certification Authorities might or might not use this information when creating the certificate.

Example:

  • CN=My PDF Signer,O=PrimeKey Solutions,C=SE

Result

After clicking the Generate button, this column shows a button for each worker to download the generated CSR file.

Format Options

Standard CSR

Creates a normal PKCS#10 certificate signing request.

CSR signed by worker

Create a PKCS#10 certificate signing request that is encapsulated in a PKCS#7/CMS SignedData structure.

If selected, use the drop-down list to select the CMS signer that will sign the request.

Actions

Action

Description

Generate

Performs the CSR generation for each selected key.

The Result column will provide a download button for each CSR generated.

Cancel

Returns to the previous page.