SSL Configuration Server Certificate Request

The following Server certificate request tasks are required to configure SSL between the AccuRoute Server and Ricoh (Android) device.

See About Ricoh Android Device SSL Configuration for more information.

Creating a Server certificate request

Using Internet Information Services (IIS) Manager, you must create a Server certificate request after creating the Self-Signed CA certificate and generating a Private key.

To create a Server certificate request

  1. Open the Internet Information Services Manager (IIS) on the computer where the AccuRoute Server is located.
  2. Select the Server connection on the Connections pane.
  3. Select Server Certificates on the IIS section.
  4. Select Create Certificate Request on the Actions pane. The Request Certificate wizard appears.

See IIS > Actions > Create Certificate Request pane below.

  1. Type or copy/paste the following information from the Self-Signed CA certificate.
  • Common name
  • Organization
  • Organizational unit
  • City/locality
  • State/province
  • Country/region
  1. Click Next. The Cryptographic Service Provider Properties wizard dialog box appears.
  2. Select a Cryptographic service provider from the drop-down list.
  3. Select a Bit length.
  4. Click Next. The File Name wizard dialog box appears.
  5. Specify a certificate request file name in the box provided with a *.CSR extension and use the Browse ellipsis (…) button to select a location, if necessary. Ensure the file name includes the .CSR extension.

Note: If you select the Browse button to specify a different location for the certificate request, you will need to specify the file name with the *.CSR extension in the File name box again, change the *.txt to *.* parameter in the box next to the File name box and click Open.

  1. Click Finish.

Note: In this example, the *.CSR (certificate server request) file is saved to the OpenSSL-Win64\bin folder.

Creating a Server certificate

Using a CA resource, you must create a Server certificate by using theSelf-Signed CA certificate and Server certificate request created previously.

Note: Refer to the documentation provided by your CA resource. The next series of steps use OpenSSL as an example and may not apply to your specific SSL configuration.

To create a Server certificate

  1. Run OpenSSL.
  2. Type the following command at the prompt to create a Server certificate.

OpenSSL> x509 -req-in certificateserverrequest.csr -CA certificate.crt -CAkey PrivateKey.key -CAcreateserial -out *.server.crt -days 500 -sha256

  1. Replace the information highlighted above with your certificate-related information.
  2. Ensure the following information is specified in the command and press Enter.
  • certificateserverrequest.csr (certificate server request)
  • certificate.crt (self-signed CA certificate)
  • privateKey.key (self-signedCA certificate private key)
  • *.server.crt (new server certificate filename)

Completing the Server certificate request

Using Internet Information Services (IIS) Manager, you must complete the Server certificate request.

To complete the Server certificate request

  1. Open the Internet Information Services Manager (IIS) on the computer where the AccuRoute Server is located.
  2. Select the Server connection on the Connections pane.
  3. Select Server Certificates in the IIS area.
  4. Select Complete Certificate Request on the Actions pane. The Complete Certificate RequestCertificate dialog box appears.
  5. Use the Browse ellipsis(…) button next to the File name box and find the Server certificate. If necessary, you can change the file name search criteria from *.cer to *.*.
  6. Select the Server certificate (*.crt) and click Open.
  7. Type a friendly name in the box provided.
  8. Click OK. The Server certificate completed request appears on the Server Certificates list.

See the Complete Certificate Request dialog box below.

Binding the Server certificate

Using Internet Information Services (IIS) Manager, you must bind the Server certificate to the sites that require SSL.

To bind the Server certificate

  1. Select Default Web Site on the Connections pane.
  2. Select Bindings on the Actions pane. The Site Bindings dialog box appears.
  3. Click Add. The Add Site Binding dialog box appears.
  4. Select https from the Type drop-down list.
  5. Select the Server certificate you created from the SSL certificate drop-down list box.
  6. Click OK.

See the Add Site Binding dialog box below.

See also

 

SSL Configuration Device Client and Web API

SSL Configuration XML Files

SSL Configuration Server and Device