Generate a CSR for Cisco Ironport

Under Cisco Ironport version "AsyncOS for Email Security 7.6", follow the instructions below to generate a CSR:

1- Create the certificate request (CSR)

• Connect to Network/Certificates in Cluster mode and click on "Add Certificates"
  
• Select "Create Self-Signed Certificate"
• fill in the fields as indicated below:
  
  
  • CN: Common name / domain name / server name / FQDN:
    Indicate here your SSL server name, such as "secure.company.com", "www.my-domain.com" or "www.product.com". No IP address (learn more). No spaces nor blank characters. We advise not to fill in this field or to enter a generic term such as "IT Department".
    
    Even if we do not advise so, intranet address can be provided in the CSR (learn more)
    
    In the case you want to order a multiple-domains / SANs certificate, just enter the main address in the CSR. This one cannot be change during your certificate lifetime. Enter the other address to secure in the order form (those ones can be modified via reissuance).
    
    
  • O: Organization / Company Name:
    indicate the corporate name of your company (no trade name or acronym), in uppercase preferably.
    
    
  • C: Country: 
    2 letter code of the organization country (FR for France)
    
    
  • ST: State: 
    in France indicate the name of the department where your company headquarters are based (not the number).
    
    
  • L: Location/ City:
    indicate the city where your company headquarters are based.
    
    
  • OU: Organisational unit / Department / Branch :
    We advise not to fill in this field or to enter a generic term such as "IT Department".
  
• Click "Next"
• Then click on "Download Certificate Signing Request...".
• Make a local backup copy of the CSR, then validated the creation of a self-signed certificate by clicking on "Submit"
  

3- Finalize the order process

• Use the appropriate link to place your order on our website. SeeAccess an order form.
• Copy/paste the content of the www.example.com.csr file in the form.

Useful links

• Install a server certificate on Cisco Ironport