When you set up the SSL certificate for the Horizon Mirage Edge server, you must first generate the Certificate Signing Request (CSR).

You can use the OpenSSL tool or the makecert tool to generate the CSR.

To generate a CSR using the Windows Management Console, perform the following procedure.

1

On the Horizon Mirage Edge server, open the Windows Management Console, add the Certificates snap-in, and select the local computer account.

2

Open the certificate snap-in, right-click the Personal store node and select All Tasks > Advanced Operations > Create Custom Request.

3

In the custom request area, select Proceed without enrollment policy.

Option

Description

Custom Request

Select Proceed without enrollment policy.

Template

Select Legacy Key.

Request Format

Accept the default settings for the PKCS #10 text boxes.

Certificate Information

Click Details for the Custom Request and click Properties.

4

Click the General tab and type a certificate-friendly name.

You can use the same name as the subject name.

5

Click the Subject tab, and in the Subject Name area, provide the relevant certificate information.

Option

Description

Common name, value

Server FQDN. This is the certificate subject name that is used in the Horizon Mirage configuration to find the certificate. The FQDN must point to that server and is validated by the client upon connection.

Organization, value

Company name, usually required by the CA.

Country, value

Two-letter standard country name, for example, US or UK. Usually required by the CA.

State, value

State name.

Locality, value

City name.

6

Click the Extensions tab and select the key use information from the pull-down menus.

Option

Description

Key Usage

Select Data Encipherment.

Extended Key Usage

Select Server Authentication.

7

Click the Private Key tab and select key size and export options.

Option

Description

Key Options

Select the required key size (usually 1024 or 2048).

make Private Key Exportable

Select to export the CSR, and later the certificate, with the private key for backup or server movement purposes.

Key Type

Select exchange (the default value is signature).

8

Click OK to close the Certificate Properties window, and click Next in the Certificate Enrollment wizard.

9

Leave the default file format (Base 64), and click Browse to select a file name and location of where to save the CSR. The certificate request is completed.

10

Click the Certificates Enrollments & Certificates tab and click Refresh.

You can export the CSR with the private key for backup purposes.

After generating the Certificate Signing Request, continue with installing the server SSL certificate for the Edge server. See Install the Server SSL Certificate.