InstallationSSL Certificate for NAS Service

SSL Certificate for NAS Service

Create a SSL Certificate

CSR - Certificate Signing Request.
  • Install 'Microsoft Visual C++ 2008 Redistributable Package' (http://www.microsoft.com/DOWNLOADS/details.aspx?FamilyID=9b2da534-3e03-4391-8a4d-074b9f2bc1bf&displaylang=en) if it is not already installed;
  • Install the 'OpenSSL' tool (http://www.slproweb.com/products/Win32OpenSSL.html);
  • Add the 'Environment variables' (variable 'Path') path to the installed OpenSSL tool (for example C:\OpenSSL\bin). Open the 'My Computer' properties, then open the 'Advanced' tab and click on 'Environment variables'. Select in the 'System variables' variable 'Path' and the value ';C:\OpenSSL\bin' at the end of the string;


    Adding the Path to the OpenSSL Tool

  • Run from the Windows command prompt the 'openssl req -new -newkey rsa:2048 -keyout <keyFileName>.key -nodes -out <CSRFileName>.csr' - it will create a CSR file and a private key;
  • Get a certificate for using the just created CSR from the SSL certificate providers (www.instantssl.com, www.thawte.com, ...);
  • Create a PFX certificate file as follows (this will contain a private key and your SSL certificate): Run from the command prompt the 'openssl pkcs12 -export -out <certFileName>.pfx -inkey <privateKeyFileName>.key -in <certificateFileName>.crt -certfile <CACertificateFileName>.crt'.
    You can retrieve the CACertificate from the SSL certificate providers, it will approve that your certificate is real.
InstallationSSL Certificate for NAS Service