How to create custom SSL certificates in Apex

1. Create a new file named 'san.cnf' in C:\Program Files\Common Files\Observer Web Server\bin

2. In the file, place the text below: [Note, the highlighted field must contain the DNS name of the server.]

default_bits = 4096

distinguished_name = req_distinguished_name

req_extensions = req_ext

[ req_distinguished_name ]

countryName = Country Name (2 letter code)

stateOrProvinceName = State or Province Name (full name)

localityName = Locality Name (eg, city)

organizationName = Organization Name (eg, company)

commonName = Common Name (e.g. server FQDN or YOUR name)

[ req_ext ]

subjectAltName = @alt_names

[alt_names]

DNS.1 = 5l60p12.ds.jdsu.net

3. Taking note of the directory, run the command:

C:\Program Files\Common Files\Observer Web Server\bin>openssl req -out server.csr -newkey rsa:4096 -nodes -keyout ..\conf\server.key -config san1.cnf

4. Copy the certificate request 'server.csr' from C:\Program Files\Common Files\Observer Web Server\bin and send it to you CA admin to get a certificate generated.

5. Once you have the certificate, rename it to 'server.crt' and place it in C:\Program Files\Common Files\Observer Web Server\conf.

6. Restart the Observer Web Server service

The above is applicable for Observer Apex, Apex Lite and OMS.