This page is available to list information and links to support pages with information useful for system administrators responsible for utilizing the InCommon Certificate Service.
...
Follow these directions to generate a certificate signing request (CSR): CSR Generation: Using OpenSSL (Apache & mod_ssl, NGINX)
Tomcat (Linux/Unix)
Requesting a new certificate
Follow these directions to generate a certificate signing request (CSR): http://www.digicert.com/csr-creation-tomcat.htm
Submitting the CSR
Follow these directions to submit the certificate signing request (CSR): InCommon Certificate Service - SSL Certificate Request
Installing a Certificate
...
If you are replacing a server that currently has an InCommon certificate in use, you can migrate the certificate to the new server, avoiding the need to issue a new CSR and wait for a new certificate to be generated. This can be done even if the new server is using a different version of Windows and IIS than the existing server. Here are the directions for Exporting and Restoring a PFX file to IIS
Apache httpd (Linux/Unix)
...
Tomcat (Windows)
http://www.digicert.com/ssl-certificate-installation-tomcat.htm to install directly to Tomcat.
Or another method of getting SSL protection in Tomcat on Windows is to first request and install a certificate in IIS (even if no website is hosted by IIS), and the export the certificate from IIS, to import into Tomcat. To export an SSL certificate from IIS for use with Tomcat on Windows, follow these directions: Export SSL Certificate from IIS and Import into Tomcat
Tomcat (Linux/Unix)
...