Ensure that eDirectory is configured as the CA.
Issue the certificate for the Primary Server:
Launch iManager.
Log in to the eDirectory tree as an administrator with the appropriate rights.
For more information about the appropriate rights, see the Entry Rights Needed to Perform Tasks section in the NetIQ Certificate Server 3.3 documentation.
From the Roles and Tasks menu, click Novell Certificate Server > Issue Certificate.
Click Browse to browse for and select the CSR file, zcm.csr, then click Next.
Accept the default values for the key type, the key usage, and the extended key usage, then click Next.
Accept the default certificate basic constraints, then click Next.
Specify the validity period and the effective and expiration dates, then click Next. Depending on your needs, change the default validity period (10 years).
Review the parameters sheet. If it is correct, click Finish. If it is incorrect, click Back until you reach the point where you need to make changes.
When you click Finish, a dialog box is displayed and indicates that a certificate has been created. This exports the certificate into the binary DER-format.
Download and save the issued certificate
Export the Organizational CA's self-signed certificate:
Log in to eDirectory from iManager.
From the Roles and Tasks menu, click Novell Certificate Server > Configure Certificate Authority.
This displays the property pages for the Organizational CA, which include a General page, a CRL Configuration page, a Certificates page, and other eDirectory-related pages.
Click Certificates, then select Self Signed Certificate.
Click Export.
This starts the Certificate Export wizard.
Deselect the Export the Private Key option, and choose the export format as DER.
Click Next, then save the exported certificate.
Click Close.
You should now have the three files that you need to install ZENworks using an external CA.