Lumen help

Standard Certificates (V2)

Generating a Certificate Signing Request (CSR)

If you do not have a certificate, you can start by generating CSR. To do this , navigate to the “Manage Certificates” menu as described above. Media portal lists the certificates associated with the SCID you selected.

 

  • Click on “New Certificate” to begin creating a new certificate. Type in a “Certificate name” for the new certificate and click on “Generate CSR”. You will need to fill in the information for the certificate, as explained below.

     

  • In the “Common Name field”, type the fully qualified domain name you want to secure.

     

  • Fill in the details for your company so your certificate authority can verify your identity. Fill in the “Location”, “Country”, and “State” field for your company’s location. In the “Organization” field, input the legal name for your company (include suffixes such as Ltd., Inc., or Corp.). Type the department name or organizational unit using the certificate in your company (e.g., Finance, IT, HR) in the “Organizational Unit” field.

     

  • From the “Key Algorithm” list, select whether you want an RSA or EC (Elliptic Curve) certificate.

     

  • From the “Key Parameter” list, select the number of characters for the certificate. Depending on your key algorithm, this will differ.

     

    • If you selected RSA, select the number of bits for the key: 1024, 2048, or 4096.

       

    • If you selected EC, select secp256r1, secp256k1, or secp384r1.

       

  • If you need to specify additional host names for the certificate, click Add (in the Subject Alternate Names (SAN) field), then type the fully qualified domain name.

     

  • Repeat this step to add additional host names. Once all the details are filled, click “Submit”.

     

If the request is successful, Media portal gives you a CSR in .pem format for you to download or copy so you can provide the information to your certificate authority. Using the CSR you just downloaded, request a certificate from your certificate authority.

Adding a New Certificate

Once you have a certificate, irrespective of whether you did the CSR generation on Media Portal or elsewhere, you will need to add the certificate to Media Portal. To add a new certificate, navigate to the “Manage Certificates” menu.

 

  • If you did the CSR generation on media portal, a row with its certificate name will already exist. Click on “Upload Cert” to go to the “Upload Certificate” menu.

     

  • If you have done your CSR generation elsewhere, you’ll have to start by creating a new certificate by navigating to the “Manage Certificates” menu and clicking “New Certificate”. Type in a “Certificate name”, and then click on “Upload Certificate” button to go to the “Upload Certificate” menu.

     

  • Here, you can upload your certificate or certificate bundle, and your private key. You can do this by using the “Upload file” button and directly uploading a file from your local storage, or you can copy and paste the contents of your certificate, certificate bundle or private key directly into the respective field.

     

  • Lastly, If the private key you added is encrypted, type the password for the private key in the “Password” field. Once all the information is filled in, click on “Submit” to upload your certificate. You can view the state of the newly certificate on the “Manage Certificates” menu.

Replacing a Certificate

If you need to re-upload a certificate, certificate bundle, private key, or change a private key password, you can make the necessary changes rather than adding a new certificate. To replace a certificate, navigate to the “Manage Certificates”, and on the row for the certificate you wish to edit, click on “Replace cert”, and you can upload files for your certificate, certificate bundle, and private key, or you can copy and paste directly into the fields, just as described above for adding a new certificate.

Regenerating a Certificate Signing Request (CSR)

If you need to regenerate a CSR, go to “Manage Certificates” menu, and on the row for the certificate of your choice, click on the “Regenerate CSR”. Make any changes to the CSR information (as described above for generating a CSR) and submit. If the request is successful, Media portal gives you a CSR in .pem format for you to download or copy so you can provide the updated information to your certificate authority.