Step 1: Generate a Private Key

* Log in to your server using the root password and open the Terminal application.
* At the prompt, type the following commands and press return after each one:

cd
openssl md5 * > rand.dat
openssl genrsa -rand rand.dat -des 1024 > key.pem
* At the next prompt, type a passphrase, then press return. The passphrase you create unlocks the server's certificate key. You will use this passphrase when you enable SSL on your Web server.
* If it doesn't already exist on your server, create a directory at the following location:

/etc/httpd/ssl.key
* Make a copy of the key.pem file that you just created and rename it server.key. Then copy server.key to the ssl.key directory.

Step 2: Create your Certificate Signing Request

* At the prompt, type the following command and press return:

openssl req -new -key key.pem -out csr.pem
* When prompted, enter the following information:

o Country: Enter the two-letter country code for your country.
o State: Enter the name of the State or Province in which your organization operates. Do not abbreviate.
o Locality: Enter the name of your city, town, or other locality.
o Organization Name: Enter the name of your organization.
o Organizational Unit: Enter the name of your division, department, or other operational unit of your organization.
o Common Name: Enter the domain name that you want to use your SSL certificate with.
o E-mail address: Enter your e-mail address.

The file csr.pem is generated from the information you provided.

When asked to "Copy & Paste" your CSR into the CSR field during the order process, open the csr.pem file with a text editor and copy and paste the content into the CSR field on the order form.


For additional MAC OSX information please visit the Apple site

Click for Mac OS X client specific information