Sophos UTM 9

How to generate a Certificate Signing Request (CSR) on Sophos UTM 9

Please exclude all Brackets from the following commands.

  1. Log into the back end of the UTM.
  2. Log in as root su.
  3. Then switch to the home directory (cd/home/login)
  4. Now create a openvpn.cnf file with the following commands (cat/et/ssl/openssl.cnf | grep -v SUBJECT_ALT_NAME > ./openssl.config)
  5. Then we have to generate the CSR.
  6. openssl req -config  ./openssl.config -new -newkey rsa:2048 -out
  7. You should now get prompted for a passphrase and a Confirmation Passphrase (Enter the passphrase of your choice and press enter)
  8. You should now be prompted for details for the CSR ( Enter the details and hit enter again.
  9. The completed CSR will be saved to /home/login and can be downloaded with WinSCP.