Creating a certificate signing request

To enable SSL connections for your FileMaker Server installation, you should have a valid digital certificate installed. FileMaker Server provides a standard SSL certificate signed by Claris International Inc. that does not verify the server name. The Claris International Inc. default certificate is intended only for test purposes.

To request an SSL certificate from a certificate authority (CA), create a certificate signing request, serverRequest.pem, and send it to the CA, using the process defined by the CA. For a list of supported CAs, see the Knowledge Base.

To create a certificate signing request, you can use Admin Console or the CLI command fmsadmin certificate create. See FileMaker Server Installation and Configuration Guide or Using the command line interface for the certificate command.

To create a certificate signing request using Admin Console:

  1. Click the Configuration > SSL Certificate tab.

  2. Click Create CSR.

  3. For the certificate signing request (serverRequest.pem), enter the following information:

    • Domain name: The fully qualified domain name for your server. To create a wildcard certificate, use a wildcard in place of the fully qualified domain name. For example: *.domain.com.

    • Organization (Company name): Your company's full name.

    • Organization unit: The name of your organization or department.

    • City: The city where your server is located.

    • State or Province: The fully spelled-out state or province where your server is located.

    • Country: The two-letter code for the country where your server is located. For a list of two-letter country codes, see the International Organization for Standardization (ISO) website (iso.org).

  4. For the private key file (serverKey.pem), enter the encryption password and confirm the password.

  5. Click Create to create the serverRequest.pem and serverKey.pem files in the CStore folder.

  6. Click Copy to save the CSR and provide it to the CA using the process defined for your organization.

Notes 

  • Creating a request for a subject alternative name (SAN) certificate is not supported. To request a SAN certificate:

    1. Create a certificate signing request.

    2. Send the certificate signing request to the CA to have them create a certificate.

    3. Request the CA to extend the certificate with additional names.