Generate CSR Cisco Secure ACS

Follow these instructions to generate a Private Key and CSR.

1. Login to ACS and click System Configuration.
2. Click ACS Certificate Setup.
3. Click Generate Certificate Signing Request.
4. Fill out the the Generate New Request form. The first form field is marked Certificate Subject. The Certificate Subject field will accept a set of key=value pairs. Certain keys are required: CN (common name), O (organization), L (locality or city), S (state or province), and C (country). OU (organizational unit is optional). An example string would be: CN=www.mysite.com, O=Gotham Books LLC, OU=Sales, L=Atlanta, S=Georgia, C=US
5. You will be asked for several pieces of info which will be used by GeoTrust to create your new SSL certificate. These fields include the Common Name (aka domain, FQDN), organization, country, key bit length, etc. Use the CSR Legend in the right-hand column of this page to guide you when asked for this information. The following characters should not be used when typing in your CSR input: < > ~ ! @ # $ % ^ / \ ( ) ? , &
6. In the Private Key File box enter the full path where you would like the associated private key to be stored, such as C:\privatekey.key.
7. Enter a private key password, 2048 for the bit length, and SHA1 for the Digest to Sign With.
8. Click Submit and your CSR will be viewable from the right-side of the window.
9. Save a copy of your CSR. The CSR will be needed during the online order process. You'll be asked to copy-and-paste your CSR into a special CSR box.
   
   Below is an example of what your CSR will look like. This is a example only and cannot be used to generate your SSL certificate.
   -----BEGIN CERTIFICATE REQUEST----- MIIB3zCCAUgCAQAwgZ4xCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdHZW9yZ2lhMRAw DgYDVQQHEwdBdGxhbnRhMREwDwYDVQQKEwhHZW9DZXJ0czEaMBgGA1UECxMRSW5l cm5ldCBNYXJrZXRpbmcxGTAXBgNVBAMTEHd3dy5nZW9jZXJ0cy5jb20xITAfBgkq hkiG9w0BCQEWEmFkbWluQGdlb2NlcnRzLmNvbTCBnzANBgkqhkiG9w0BAQEFAAOB jQAwgYkCgYEA5KOi+RnRzBuBQeFYjrwZg1sfT7zr4L8j0Khuoj621x+lGBmFC76c kGclUIQBmuyp9T9NrNqAjGtEmgdFr6cWLJtgXgi+BaZDLX9BMYF49NuTggNoEUMX crQRAENHb2YthG2SEcF5p98RNcDPzWOA3a4AMvgkxDlDGYUhbcQhnt0CAwEAAaAA MA0GCSqGSIb3DQEBBAUAA4GBAIapt6Tw0BTYUwEAX0/oKvaaN/ghErR85jdW7xOD b1hL0yNfb495A7e/IQyBEP5a/v+QUOtibHS4geiPhH9etAI+DSQmctjbf6dMGJql gCXGwlsTbjPOSmNT+/X2Uvf1BlplwqAMDghEuFHsjshlypz1NEg94ri2K9N1VrBs
+iAv
-----END CERTIFICATE REQUEST-----

Additional Resources:

Cisco ACS Configuration Example.