Signing the Server Certificate

Sign the server certificate request with the createcert utility.

Prerequisites
Ensure you have created a certificate request either by using the Web server's administration tool or by running createcert -r.
  1. At a command prompt, change to <UnwiredPlatform_InstallDir>\UnwiredPlatform\Servers\SQLAnywhere11\BIN32.
  2. Run:

    createcert and use the -s option to point to the certificate request file you created previously.

    For example:

    createcert -s certreq.txt

  3. When prompted, enter the root certificate and its private key file and password created earlier to sign this certificate request. For all remaining prompts, enter appropriate values for your deployment; for example: 
    <UnwiredPlatform-InstallDir>\UnwiredPlatform\Servers\SQLAnywhere11\BIN32>createcert -s certreq.txt
SQL Anywhere X.509 Certificate Generator Version 11.0.1.2405
Enter file path of signer's certificate: rsa_root.crt
Enter file path of signer's private key: rsa_private.crt
Enter password for signer's private key: sybase
Serial number [generate GUID]: <enter>
Generated serial number: ca8295aa17ca41a9a4bd0a3f613c0886
Certificate valid for how many years (1-100): 20
Certificate Authority (Y/N) [N]: N
1.  Digital Signature
2.  Nonrepudiation
3.  Key Encipherment
4.  Data Encipherment
5.  Key Agreement
6.  Certificate Signing
7.  CRL Signing
8.  Encipher Only
9.  Decipher Only
Key Usage [3,4,5]: <enter>
Enter file path to save certificate: myserver.crt

    The myserver.crt file is installed on the server. Record the file information for future reference.

Parent topic: Encrypting Relay Server Connections
Previous topic: Generating a Certificate Request
Next topic: Installing the CA Certificate and Configuring the Server