How to create a certificate signing request (CSR) for use with Symantec Mobility Suite

Products

• Mobile Management
• Mobility Suite

Issue/Introduction

 

Resolution

Note: The below method may also be used to generate a certificate signing request (CSR) for a web-server.  If this is the case, the common name (CN) of the certificate must be the FQDN of the web server.  If making a request for iOS development then use the developer's email address for the CN in the CSR.

OSX-Method. 1
Linux-method. 2
IIS-Method. 2

OSX-Method:

1.    Open Keychain access in the Finder by browsing to Applications and Utilities

2.    Select the login keychain in the upper left-hand corner. 
Note: All work will be done from the login keychain.

3.    Select Keychain Access > Certificate Assistant at the top and select the Request a Certificate from a Certificate Authority option.  Fill out the form with user information and select the Save to disk option and click continue. 

4.    Now that the CSR is created, it may be used to generate the code-signing or push certificate. 

Note: Although the same CSR may be used to generate both the code-signing (Distribution) and the push certificates.  Create an individual request for each certificate.

Linux-method:

1.    From any Linux box with openssl installed enter the following, as root:
openssl req -out CSR.csr -new -newkey rsa:2048 -nodes -keyout privateKey.key
For Example:

2.    Download the CSR.csr to the workstation using WinCP or Putty as described in How to transfer files from a Linux machine.

Note: Although the same CSR may be used to generate both the code-signing (Distribution) and the push certificates.  Create an individual request for each certificate.

IIS-Method

See HOWTO59214 to create a CSR in IIS

Note: Although the same CSR may be used to generate both the code-signing (Distribution) and the push certificates.  Create an individual request for each certificate.