Create RP certificate request
If you haven't already done so, start by unpacking the downloaded zip file with BankID Keygen in your preferred folder. Follow the instructions below, for the system you use.
Start Keygen in Windows
From the command prompt, navigate to where you saved the BankID Keygen (keygen-windows.exe) and start the program.
keygen-windows.exe
Start Keygen in macOS
Start a terminal and navigate to where you saved BankID Keygen.
Depending on your local environment and permissions you might have to change permissions to run the application. To change permission, use the command chmod.
chmod +x keygen-macos-universal
Then start the Keygen program.
./keygen-macos-universal
Start Keygen in Linux
Start a terminal and navigate to where you saved BankID Keygen.
Depending on your local environment and permissions you might have to change permissions to run the application. To change permission, use the command chmod.
chmod +x keygen-linux
Then start the Keygen program.
./keygen-linux
Create certificate request
When you start the Keygen program you will se the Keygen welcome screen:
To generate a CSR, select 1 on the Welcome screen and press Enter. The following information is required in the CSR process:
Official name of your organisation
This should be your organisation’s registered company name (max 64 characters).
Corporate identity number of your organisation
Enter your company’s corporate registration number according to Bolagsverket or equivalent without hyphens or spaces (10 digits).
Password to protect your private key
This is your password to protect your private key that will be generated. It must be at least 12 characters long and contain four letters and one digit. You will have to use this password later in the process when creating your PKCS#12.
It's very important that you remember this password as it can't be restored.
Display name
This will be shown to the user when they identify themselves or sign to your services. Enter the name to be displayed (max 40 characters) according to the instructions from your bank. The display name is usually the organization's registered company name or the name commonly used for the organization /e-service, e.g. a registered trademark.
Before the certificate request is created you will have the option of verifying the information. If all looks good, press Y and enter to create the certificate request.
Private key file
The application will suggest a filename for Private Key file. If you accept it the file will be saved in the working directory. If you want to save it in another place you can manually type the path and file name. Make sure the file extension is still .key.
Certificate request file
The application will suggest a filename for CSR file. If you accept it, the file will be saved in the working directory. If you want to save it in another place you can manually type the path and file name. Make sure it's still .p10. This is the file you need to send to the bank in order to get your certificate.
The CSR-generation is finished and you can ensure your request is created and saved on the disc.