CSR Generation Instructions for Sequoia Initiative Validation Certificates

Please follow the steps below to prepare a CSR for a certificate intended for use in a test environment:

NOTE: This guidance is suitable for Windows-based systems; check with your IT department and software vendor (if the certificate will be used with third party software) for steps specific to the intended environment.

Locate or generate your 2048 bit RSA private key. The private key MUST reside on a system that will also be available to you when you download your certificate from our website, in order to properly link the key with the certificate we will send back to you. You'll want to select the PKCS #10 format when generating the key. Give the certificate a name you will recognize later, like EMR Direct Carequality Testing Cert or EMR Direct Facilitated FHIR Testing Cert.

When creating the key, choose properties in accordance with other local policies, for example, only checking "Strong Private Key Protection" if your local security policy requires that your application use a password every time the key is used (which may not be practical). Select the sha256 hash algorithm. Make the private key exportable if your local policy permits it, and you expect you'll need to back up the private key or use it on another server at a later time. Always keep your private key protected and do not share it. No one should never ask you for your private key; its role is to remain secured within your system.

Once you have created the private key, you'll generate a CSR ("Certificate Signing Request" or just "certificate request"). Save the certificate signing request in Base 64 format to a file location from which you can find it to upload it to EMR Direct. Include similar text in the filename you choose for the CSR; the filename should end with the ".csr" file extension. Some systems refer to this as "Request Files (*.req).

Once the CSR file is generated, a Sponsor can upload the CSR file to us by signing in to their administrative account according to the validation Facilitated FHIR workflow or the validation workflow for all other Sequoia account types.

If the field to upload the CSR is not visible after expanding the Organization with by clicking the "+" to the left of the Organization name, or with any questions or for technical support contact DirectTrust at support@directtrust.zohodesk.com or for Facilitated FHIR certificates, contact EMR Direct at support@emrdirect.com.


Did this article answer your question? If not, please contact us.