Zyxel ZyWall USG 300 SSL Install and CSR Creation Guide

Zyxel ZyWall USG 300 SSL Management Instructions

Zyxel ZyWall USG 300 CSR Creation

To get started, you will want log in to the Web Configurator. Once open, click on Object, Certificate, then My Orders. The My Certificates section should give you an overall detailed view of any certificates or requests that are on the machine. Under the My Certificates section, click the Add button. This will allow us to begin creating the CSR:

Name: This is a personal identifier. The name will appear under the My Certificates section and should be named in a way that would help you remember which cert it is.

Common Name: If the connection will be made through a domain name, select Host Domain Name, If it will be accessed directly from the IP address, select Host IP Address.

Organizational Unit: This is optional, but is often filled in with names like IT Department or Headquarters. I can really be anything that describes your situation.

Organization: Enter your legal business name.

Country: While optional, a 2-digit country code would be fine (i.e. US).

Key Type: Select RSA.

Key Length: Select a minimum of 2048 bits.

Enrollment Options: Select to, "Create a certification request and save it locally for later manual enrollment". This should be the last thing we need to do on this page and should make the CSR, which can then be retrieved from the My Certificate Details screen. Once you retrieve the CSR, you can copy and paste it to the DigiCert order form or upload it to a pending order.

Installation from Certificate Files (.cer, .p7b, .crt/.pem)

Once you receive the .zip containing the certificate files, extract the “certs” folder somewhere on your machine. Depending on the type of certificate file you received back from us, will determine what to do next.
Note: The file you will import cannot contain any space in the file name. Also, you cannot import a file that has the same name as a previous certificate file that is currently on the machine.

.cer or .p7b - You will go Object, Certificate, My Certificates, then click on Import in the Web Configurator. Click Browse and locate the certificate file. Leave the password field blank, then click OK. The certificate should now be installed.

.crt - We will be combining the files you received in to a .pem format. To create the .pem file, you can reference our .PEM instructions: https://www.digicert.com/ssl-support/pem-ssl-creation.htm

With a text editor (such as wordpad), copy and paste the entire body of each certificate into one text file in the following order:

The Primary Certificate - your_domain_name.crt
The First Intermediate Certificate - DigiCertCA.crt
The Second Intermediate Certificate(if a 2^nd intermediate cert is supplied) – DigiCertCA2.crt
The Root Certificate - TrustedRoot.crt

Make sure to include the beginning and end tags on each certificate. The result should look like this:

-----BEGIN CERTIFICATE-----
(Your Primary SSL certificate: your_domain_name.crt)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(Your First Intermediate certificate: DigiCertCA.crt)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(Your Second Intermediate certificate (if applicable): DigiCertCA2.crt)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(Your Root certificate: TrustedRoot.crt)
-----END CERTIFICATE-----

Save the combined file as your_domain_name.pem. Your .pem file should be ready for use. You will go Object, Certificate, My Certificates, then click on Import in the Web Configurator. Click Browse and locate the certificate file. Leave the password field blank, then click OK. The certificate should now be installed.

Installation from a .pfx File

If you have machine that is capable of exporting an installed certificate to a .pfx, such as a Windows server, then this might be the easiest option for the certificate installation. You can reference our certificate export instructions for creating the .pfx file: https://www.digicert.com/import-export-ssl-certificate.htm

Once you get a .pfx file created, you will go Object, Certificate, My Certificates, then click on Import in the Web Configurator. Click Browse and locate the .pfx file. You will need to put in the password that was used to create the .pfx file for the import to work. The certificate should now be installed.