How to Create a Domain or Third-Party Certificate for Dell Data Security / Dell Data Protection Server

To create a CSR:

1. Right-click the Windows Start menu and then click Run.

2. In the Run UI, type MMC and then press OK.

3. From the Microsoft Management Console, select File, and then Add/Remove Snap-in.

4. Select Certificates and then click Add.

5. Select Computer account and then click Next.

6. With Local computer selected, click Finish.

7. Click OK.

8. In Console Root, expand Certificates.

9. Right-click Personal, select All Tasks, Advanced Operations, and then click Create Custom Request.

10. Click Next.

11. Under Custom Request, select Proceed without enrollment policy and then click Next.

12. From the Custom request menu:
    1. Select template: (No template) Legacy key
    2. Select format: PKCS #10
    3. Click Next.

13. Expand Details and then click Properties.

14. In the General tab, populate the Friendly name and Description.

15. In the Subject tab:
    1. From subject name, populate and then Add:
       1. Common name (CN)
       2. Organization
       3. Locality
       4. State
       5. Country
    2. From alternative name, populate the Dell Data Security server DNS and then click Add.

16. In the Private Key tab:
    1. Expand Cryptographic Service Provider.
    2. Select Microsoft RSA SChannel Cryptographic Provider.
    3. Expand Key options.
    4. Select key size: 2048.
    5. Check Make private key exportable.
    6. Click OK.

17. Click Next.

18. Browse to a location to save the file and then click Finish.

To export a .pfx:

1. Bring the CA signed certificate (.cer) to the machine where the CSR originated from.
2. Right-click the .cer file and then click Install Certificate.

3. In the Certificate Import Wizard, select Local Machine and then click Next.

4. Select:
   1. Select Place all certificates in the following store.
   2. Click Browse.
   3. Click Personal.
   4. Click OK.
   5. Click Next.

5. Click Finish.

6. Click OK.

7. Right-click the Windows start menu and then click Run.

8. In the Run UI, type MMC and then press OK.

9. From Microsoft Management Console, select File, and then Add/Remove Snap-in.

10. Select Certificates and then click Add.

11. Select Computer Account and then click Next.

12. With Local computer selected, click Finish.

13. Click OK.

14. Go to Certificates, Personal, and then Certificates.

15. Right-click the imported certificate (step 5), click All Tasks, and then click Export.

16. Click Next.

17. With Yes, export the private key selected, click Next.

18. From the Export File Format menu:
    1. Select Personal Information Exchange - PKCS #12 (.PFX).
    2. Check Include all certificates in the certification path if possible.
    3. Check Export all extended properties.
    4. Click Next.

19. Enter and confirm the Password. Once populated, click Next.

20. Browse to a location to save the .pfx and then click Next.

21. Click Finish.

22. Click OK.

23. If using:
    • Dell Security Management Server Virtual (Formerly Dell Data Protection | Virtual Edition), go to Step 24
    • Dell Security Management Server (Formerly Dell Data Protection | Enterprise Edition), the .pfx creation process is completed.
24. To successfully upload a .pfx, Dell Security Management Server Virtual requires:
    • A completed .pfx
    • A third-party FTP (file transfer protocol) client.
      • Examples of an FTP client include (but are not limited to):
        • Filezilla
        • WinSCP
        • FireFTP

25. Launch the FTP client.
26. In the FTP client, Log in with an FTP user to the Dell Security Management Server Virtual.

27. Go to /certificates/.

28. Move the .pfx from where it was saved (Step 20) to /certificates/.

29. Close the FTP client.