IT certificate requirements

root certificate

Local Computer Trusted Root Certification Authorities store

intermediate certificate

Local Computer Intermediate Certification Authorities store

SSL certificate

Note: Enable the "Mark this key as exportable." option if your importing this certificate through the Certificate Import Wizard.

Local Computer Personal store

ArchestrAWebHosting user group read access is required.

Key Usage

Digital Signature, Key Encipherment, Data Enchipherment (b0)

Required

Enhanced Key Usage

Server Authentication (1.3.6.1.5.5.7.3.1)

Required

Subject Alternative Name

DNS Name=localhost

Required when the client is accessing your web applications via localhost.

DNS Name=[machine name]

Required.

For example: DNS Name=mymachineName

DNS Name=[public origin]

Only required when the Management Server Public Origin feature is enabled.

For example: DNS Name=mypublicorigin.mydomain.com

DNS Name=[fully qualified domain name]

Required when the wildcard domain is not used. PCS Framework uses the FQDN as the endpoint identity to authenticate the PCS web service.

This item must be the last entry in the SAN list due to a known Microsoft .NET Framework issue.

For example: DNS Name=mymachine.mydomain.com

DNS Name=[wildcard domain name]

Only required when IT plan to deploy the Management Server on any machine in the domain.

For example: DNS Name=*.mydomain.com

Friendly Name

A friendly display name

Required.

Configurator displays the friendly name in the certificate drop-down list.

For example: IT Binding Certificate