generate-csr-f02258d.md

generate-csr

Generates and returns a certificate signing request (CSR).

Remember:

SAP Business Technology Platform, Neo environment will sunset on December 31, 2028, subject to terms of customer or partner contracts.

For more information, see SAP Note 3351844.

Tip:

This documentation refers to SAP Business Technology Platform, Neo environment. If you are looking for documentation about other environments, see SAP Business Technology Platform ↗️.

neo generate-csr --account <subaccount_technical_name> --user <e-mail_or_user> --host <host> --name <certificate_name> 
--certificate-distinguished-name <type0=value0,type1=value1,type2>

Parameters

To list all parameters available for this command, execute neo help generate-csr in the command line.

Required
Optional
-a, --account	Subaccount technical name Type: string (up to 30 characters; lowercase letters and numbers, starting with a letter)
-h, --host	Enter a region host. Type: URL. For acceptable values, see Regions ↗️.
-p, --password	To protect your password, enter it only when prompted by the console client and not explicitly as a parameter in the properties file or the command line. Type: string
-u, --user	Use your email, SAP ID, or user name. Type: string
-n, --name	Unique identifier of the certificate Type: string When generating a CSR, the certificate name must start with a letter and can only contain lowercase letters (a-z), uppercase letters (A-Z), numbers (0-9), underscores ( _ ), and hyphens (-).
-d,--certificate-distinguished-name	Attributes of the CSR Type: string (formatted as type0=value0,type1=value1,type2=..., characters may be escaped by \ (backslash), no spaces are skipped) Allowed attributes: Country (C) – two-digit code - for example, ‘GB’ State (ST) – state or province name - for example, ‘Hampshire’ Locality (L) – city full name - for example, ‘Portsmouth’ Organization (O) – company name Organizational Unit (OU) – for example, ‘IT Department’ Common Name (CN) – the domain name for which you are requesting the certificate - ‘www.example.com’ Email Address (E) – to validate the certificate request, some certificate authorities (CA) require the email address of the domain owner
-e, --elliptic-curve	Elliptic curve for ECC algorithms Type: string Supported curves: secp256r1, secp384r1
-s, --subject-alternative-name	A comma-separated list of all domain names to be protected with this certificate, used as value for the Subject Alternative Name field of the generated certificate. Type: string
-g, --signature-algorithm	Signature algorithm Default: SHA256withRSA or SHA256withECDSA Supported algorithms: SHA256withRSA, SHA384withRSA, SHA512withRSA, SHA224withECDSA, SHA256withECDSA, SHA384withECDSA, and SHA512withECDSA
-k, --key-size	The size (length) of a generated key pair. This parameter is ignored when the elliptic curve is used Default: 2048 Supported sizes: 2048, 4096

Example

neo generate-csr --account mysubaccount --user [email protected] --host hana.ondemand.com --name myfirstcert 
--certificate-distinguished-name "C=BG,O=MyCompany,CN=www.mycompany.bg,[email protected]" --subject-alternative-name “www.mycompany.com,www.mycompany.net”

Related Information

Configuring Custom Domains

list-domain-certificates

delete-domain-certificate