# How to Generate CSR in Dynatrace Managed server for SSL certificate request **URL:** \ **Category:** Dynatrace Managed\ **Tags:** ssl, dynatrace-managed\ **Created:** [April 14, 2018, 7:34am UTC](https://community.dynatrace.com/t/how-to-generate-csr-in-dynatrace-managed-server-for-ssl-certificate-request/11679 "2018-04-14T07:34:10Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![pshinde](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/pshinde/32/10356_2.png) [@pshinde](https://community.dynatrace.com/u/pshinde)\ **Post date:** [April 14, 2018, 7:34am UTC](https://community.dynatrace.com/t/how-to-generate-csr-in-dynatrace-managed-server-for-ssl-certificate-request/11679/1 "2018-04-14T07:34:10Z")
Hi Team , We would like to use internal ssl certificate instead of ssl certificate provided by dynatrace . Can you please share details steps on How to generate CSR from Managed Cluster Server . Do we need to generate 3 CSR if it is 3 Node cluster ---
**Author:** ![Babar\_Qayyum](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/babar_qayyum/32/13620_2.png) [@Babar\_Qayyum](https://community.dynatrace.com/u/Babar_Qayyum)\ **Post date:** [April 14, 2018, 12:34pm UTC](https://community.dynatrace.com/t/how-to-generate-csr-in-dynatrace-managed-server-for-ssl-certificate-request/11679/2 "2018-04-14T12:34:54Z")
Hello Prashant, Use the OpenSSL toolkit to generate CSR and provide it to the CA you have selected in order to request a valid certificate. Regards, Babar ---
**Author:** ![pshinde](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/pshinde/32/10356_2.png) [@pshinde](https://community.dynatrace.com/u/pshinde)\ **Post date:** [April 18, 2018, 11:30am UTC](https://community.dynatrace.com/t/how-to-generate-csr-in-dynatrace-managed-server-for-ssl-certificate-request/11679/3 "2018-04-18T11:30:55Z")
Hi Babar thanks for your reply. I did saw the URL shared by you but it did not highlighted process to generate CSR. it does show how to import the certificate ---
**Author:** ![Babar\_Qayyum](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/babar_qayyum/32/13620_2.png) [@Babar\_Qayyum](https://community.dynatrace.com/u/Babar_Qayyum)\ **Post date:** [April 18, 2018, 12:22pm UTC](https://community.dynatrace.com/t/how-to-generate-csr-in-dynatrace-managed-server-for-ssl-certificate-request/11679/4 "2018-04-18T12:22:27Z")
Hello Prashant, I mentioned to use the OpenSSL toolkit to generate the CSR in my first answer. Regards, Babar ---
**Author:** ![pshinde](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/pshinde/32/10356_2.png) [@pshinde](https://community.dynatrace.com/u/pshinde)\ **Post date:** [April 18, 2018, 12:24pm UTC](https://community.dynatrace.com/t/how-to-generate-csr-in-dynatrace-managed-server-for-ssl-certificate-request/11679/5 "2018-04-18T12:24:50Z")
Thanks what about keytool which is available in Linux ---
**Author:** ![JamesKitson](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/jameskitson/32/22460_2.png) [@JamesKitson](https://community.dynatrace.com/u/JamesKitson)\ **Post date:** [April 18, 2018, 12:51pm UTC](https://community.dynatrace.com/t/how-to-generate-csr-in-dynatrace-managed-server-for-ssl-certificate-request/11679/6 "2018-04-18T12:51:50Z")
That can work as well, here’s a page I usually use as reference for keytool commands: [The Most Common Java Keytool Keystore Commands](https://www.sslshopper.com/article-most-common-java-keytool-keystore-commands.html) ---
**Author:** ![pshinde](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/pshinde/32/10356_2.png) [@pshinde](https://community.dynatrace.com/u/pshinde)\ **Post date:** [April 18, 2018, 12:59pm UTC](https://community.dynatrace.com/t/how-to-generate-csr-in-dynatrace-managed-server-for-ssl-certificate-request/11679/7 "2018-04-18T12:59:58Z")
Hi James Do we need to use specific alias name & trust store /Keystore password while generating this request .Or it can be anything ? ---
**Author:** ![JamesKitson](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/jameskitson/32/22460_2.png) [@JamesKitson](https://community.dynatrace.com/u/JamesKitson)\ **Post date:** [April 18, 2018, 7:11pm UTC](https://community.dynatrace.com/t/how-to-generate-csr-in-dynatrace-managed-server-for-ssl-certificate-request/11679/8 "2018-04-18T19:11:14Z")
I’m not an expert in this area so my answer wouldn’t be authoritative but in my experience it doesn’t really matter so long as you know what they are. I think the keystore name is generally based off of the host name. ---
**Author:** ![Babar\_Qayyum](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/babar_qayyum/32/13620_2.png) [@Babar\_Qayyum](https://community.dynatrace.com/u/Babar_Qayyum)\ **Post date:** [April 19, 2018, 6:21am UTC](https://community.dynatrace.com/t/how-to-generate-csr-in-dynatrace-managed-server-for-ssl-certificate-request/11679/9 "2018-04-19T06:21:32Z")
Hello [@Prashant S.](https://answers.dynatrace.com/users/21155/view.html) As per my understanding you will have to create a customized **keystore.jks** which contains a new private key accompanied by the certificate chain (with alias `dtserver`) and has it’s password defined. Below link is for the AppMon but it should be apply on the Dynatrace. > **[Login | Dynatrace](https://sso.dynatrace.com/action/signin?goto=https%3A%2F%2Fsso.dynatrace.com%3A443%2Foauth2%2Fauthorize%2Fredirect%3FoAuth2CtxUuid%3D82d908a2-bf22-4acd-b682-01672fee287a&oAuth2RedirectUri=https%3A%2F%2Fcommunity.dynatrace.com%2Fauth%2Foauth2callback)** Regards, Babar