Creating a DPS or an Application Server certificate

You create the certificate that is based on the service type. You should verify that the service type that you select creates the appropriate certificate. You can create certificates for either the Data Processing Service (DPS) or Application Server.

When the certificate file is created, the file name uses the service name and the host name of the certificate. You cannot use the comma character in the certificate file name. The certificate file is created with a .p12 extension.

You can create multiple certificates. Certain property fields are used as default information from the previous certificate, but all of the fields can be edited. Every field in the Create Certificates dialog box is required. The information that you provide in the certificate is not validated. You should verify that the information is accurate. You must have local administrator rights to create a certificate and you must be a CCS administrator and know the root certificate password.

You are not prompted for a root certificate password if the following events have occurred:

You have recently opened the Certificate Management console
You are logged on in the context of the user who installed the system

You can find a list of the country codes at:

http://www.iso.org/iso/country_codes/iso_3166_code_lists/english_country_names_and_code_elements.htm

The Certificate Management console fails to create certificates on a Microsoft Windows Server 2008 unless the console is run as the administrator.

To create a DPS or an Application Server certificate

Click Start > All Programs > Symantec Control Compliance, and select Certificate Management Console
You may be prompted to provide the Root Certificate Password.

The Root Certificate password is created during installation.
Click OK.
In the Certificate Management Console toolbar, click Create Certificates.
In the Create Certificate dialog box, in the Service Type area, do one of the following:
- Click AppServer
- Click DPS
The default selection is DPS.
In the Expired In field, select the number of years.

The default value is 25.
In the Organization field, provide a name.

You can change the default name during certification creation.
In the Division field, provide a name.

You can change the default name during certification creation.
In the City field, provide a name.

You can change the default name during certification creation.
In the State/Province field, provide a name.

You can change the default name during certification creation.
In the Country field, provide a name.

You can change the default code during certification creation.
In the NetBIOS Name field, provide the name.

The NetBIOS Name must be less than 15 bytes in length.
In the FQDN field, provide the name.
In the IP Address field, provide the information.
Click plus(+) sign to add multiple TCP/IP addresses, if needed.
In the Destination folder field, provide the location for the saved certificate file.

You can browse to select the location.
In the Password field, type a password.
In the Retype Password field, type the same password to confirm the spelling.
Click Create Certificate.
In the Success message box, click OK.
In the Create Certificate message box, click Yes to create another certificate, if needed.