Software
Crestron
e-Control
®
2. Enter the information of the organization requesting the certificate. As shown
in the previous diagram, the information includes the domain name of the
organization, the e-mail address and department of the contact person making
the request, the company name, city and state, and the two-letter country code.
The two-character country codes correspond to ISO 3166 (International
Standards Organization), and the complete list is available on their Web site:
http://www.iso.ch/iso/en/prods-services/iso3166ma/02iso-3166-code-lists/list-
en1.html
The domain name is not transferable, and thus must be the one that will
actually be used by clients. The domain name must be officially registered to
the company; otherwise the certificate request will be rejected.
3. When
you
click
OK
, Viewport will generate the CSR and private key and
automatically save the two files in the \SYS directory of the 2-Series
processor. In addition, Viewport will prompt you to save the CSR file to a
directory on your hard drive: Locate the target directory and click
Save
.
As described earlier, the CSR file is an ASCII text file that is saved in the \SYS
directory as:
\\sys\request.csr
. The private key is also saved in the \SYS directory
with a .der extension as:
\\sys\srv_key.der
. The procedure for backing up the private
key is described in the next section.
The .csr text file is in the following format:
-----BEGIN NEW CERTIFICATE REQUEST----
MIIBZzCCARECAQAwgZQxCzAJBgNVBAYTAlVTMRIwEAYDVQQIEwlob3N0c3RhdGUxETAPB
gNVBAcTCGhvc3RjaXR5MRUwEwYDVQQKEwxob3N0bmFtZSBpbmMxCjAIBgEAEwNNSVMxG
TAXBgNVBAMTEHd3dy5ob3N0bmFtZS5jb20xIDAeBgkqhkiG9w0BCQEWEWhvc3RAaG9zdG5hb
WUuY29tMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAMxVTzjNPVWjOHUtMzEsOEWRMIQ
WvilIYliVNtK7jTbyB8WUmucwz3JGfP1LZ5AvT5OQsz8tDsILYItGGliC2tcCAwEAAaAXMBUGCSq
GSIb3DQEJBzEIEwZleHRyYTEwDQYJKoZIhvcNAQEEBQADQQDLIuRV1NBOrlLr3XWI5XiHRH
CfQ8gpDOP5MDCdVFgDPvxi5TpQSFV/3PPUAm6BKAiZxmdpX8BUaEsRdQqNfof3
-----END NEW CERTIFICATE REQUEST-----
When sending the CSR to a Certificate Authority it may be necessary to cut and paste
the text between the “Begin new certificate request” and “End new certificate request”
delimiters. To do this you can open the CSR file in a text editor such as Notepad.
Backup the private key
1. Before backing up the private key, the processor’s \SYS directory should be
the active directory so that Viewport can locate the file:
On the Viewport command line, go to the \SYS directory by typing “cd \sys”.
To open the directory type “dir”. This will display a list of files in the \SYS
directory, including the CSR (
request.csr
) and the private key (
srv_key.der
).
22
•
Crestron e-Control®
Reference Guide – DOC. 6052
