FileMaker Server 19 - CSR Generation

If security is important to your operations, all machines running FileMaker Server should have a custom SSL certificate. The standard FileMaker SSL certificate installed by default is suitable for test purposes only. Follow the step below obtain a new certificate or replace an expired certificate.

A Certificate Signing Request (CSR) is required when applying for an SSL certificate. This CSR (and private key) can be generated on your webserver. To request a wildcard certificate, fill in an * (asterisk) for the subdomain, for example *.sslcertificaten.nl (instead of www.sslcertificates.nl).

1. Open your commandline interface, depending on the FileMaker server Host OS, this can be either Terminal.app (macOS), CMD (Windows) or your shell on a Linux server.
2. Enter the following command, where you change the values to your own details;

   fmsadmin certificate create "/CN=ets-srvr.filemaker.com/O=FileMaker DBS Test/C=US/ST=California/L=Santa Clara" --keyfilepass exampleSecretPassphrase

   • C (Country code) : Your ISO country code (NL)
   • S (State or Province Name): Noord-Holland
   • L (Locality Name (eg, city): Alkmaar
   • O (Organization Name (eg, company): Xolphin B.V.
   • OU (Organizational Unit Name (eg, department) : ICT
   • CN Common Name (eg, YOUR name) []: www.sslcertificaten.nl
3. After running the command, two new files are created in your CStore folder:
   • Windows: [drive]:\Program Files\FileMaker\FileMaker Server\CStore\serverRequest.pem
   • macOS: /Library/FileMaker Server/CStore/serverRequest.pem
   • Linux: /opt/FileMaker/FileMaker Server/CStore/serverRequest.pem

The file serverRequest.pem contains the request for ordering your certificate.

To order a certificate, copy the entire contents of the generated CSR, including the first and last line and all dashes.

Order certficate