Generate a Certificate Signing Request (CSR) for Tomcat with Keytool

To generate a Certificate Signing Request (CSR), perform the following steps:

Consider: Jdk1.6 and Windows Server with Tomcat 6.0

1. Create a certificate keystore and private key with the following command:

1. i. C:\Program Files\Java\javaversionhere\bin>keytool -genkey -alias your_alaias_name -keyalg RSA -keystore your_keystore_filename
2. ii. Specify the password – must be at least 6 characters long, and MUST be remembered.

2. You must input the following:
* What is your first and last name? *This is the Common Name Field – The Fully Qualified Domain Name MUST be entered here*
[Unknown]: http://www.yourdomain.com
* What is the name of your organizational unit?
[Global Sign]: IT
* What is the name of your organization?
[Global Sign]: MyOrganization
* What is the name of your City or Locality?
[London]:PARIS
* What is the name of your State or Province?
[London]: PARIS
* What is the two-letter country code for this unit?
[GB]: FR
* Is CN=www.yourdomain.com, OU=IT, O=MyOrganization, L=PARIS, ST=PARIS, C=FR correct?
[no]: yes
* Enter key password for
(RETURN if same as keystore password):

3. Create the Certificate Signing Request file with the following command:

1. C:\Program Files\Java\javaversionhere\bin>keytool -certreq -keyalg RSA -alias your_alias_name -file certreq.csr -keystore your_keystore_filename
2. Enter keystore password: your_password_here
3. The certreq.txt file will now be generated – this file can be entered into the website. Insure to include:
   * —–BEGIN NEW CERTIFICATE REQUEST—–
   * —–END NEW CERTIFICATE REQUEST—–