4.1 Submitting a Certificate Signing Request

You need to provide a client CSR that your Messenger system can use to communicate with the NPNS service. You can obtain this client CSR either by creating it yourself (by using tools such as OpenSSL) and importing it, or Novell can create one for you.

  1. Sign in to the Novell Portal by using your Novell customer account user name and password.

  2. (Recommended) Import a CSR.

    1. From an OS X or Linux command prompt, run the following command:

      openssl req -nodes -newkey rsa:2048 -keyout novell.key -out novell.csr

    2. Click Import a CSR.

    3. Copy the contents of the novell.csr file into the CSR field.

    4. Click Validate.

    5. Continue with Section 4.2, Installing the Signed Certificate into Your Messenger System.

  3. If you don’t have a CSR, Novell can create one for you.

    IMPORTANT:Using this method requires that Novell generates the private key and sends it to you across the wire. This is a potential security vulnerability. Because of this, Step 2 is the recommended method for providing the CSR.

    However, the following points are important to understand:

    • Novell does not store the private key.

    • The private key that Novell sends is SSL-encrypted.

    • The private key can only be used to access the NPNS server; it cannot be used to access your Messenger system.

    1. Click Create a key and certificate.

    2. Specify your user information, then click Generate.

      The private key, signed certificate, and root certificate are available to be downloaded from the Novell Portal.

    3. Download the private key, signed certificate, and root certificate by clicking Download private key and certificates. You will need these files when you install the signed certificate into the Messenger system.

      The key length encryption is 2048.

    4. Continue with Section 4.2, Installing the Signed Certificate into Your Messenger System.