Generating a Certificate Signing Request

Technical Articles
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US
  1. On a computer with JDK, open Terminal.
  2. Use keytool to generate a certificate signing request by executing the following commands:
    Note:

    Modify the following command with your organization's information and desired certificate duration and security level.

    sudo keytool -genkey -alias scepca -keyalg RSA -keypass "changeit" -storepass "changeit" -dname "CN=https://jamf.instancename.com:8443, OU=Department, O=Organization, L=City, ST=State, C=Country" -keystore "/path/to/save/keystore.jks" -validity 365 -keysize 2048
    sudo keytool -certreq -keyalg RSA -alias scepca -file /path/to/save/certreq.csr -keystore /path/to/save/keystore.jks
    Note:

    If you are using Java version 8 or later, you will get a warning message during this process. This is expected and can be ignored.

  3. When prompted, enter a password for the keystore. By default, the password is "changeit".
    Note:

    You can change the default password.

  4. Using a preferred text editor, open the certreq.csr file you generated.
  5. Copy the content of the certreq.csr file.