The menu item → (Ctrl+N) starts the Certificate Creation Wizard which will guide you through a number of steps to create a certificate request.
Whenever you are done with a step in the wizard, press to go to the next step (or to review steps that are already completed). The certificate request creation can be canceled at any time by pressing the button.
On the first page of the wizard choose which type of certificate you want to create:
- Create a personal OpenPGP key pair
OpenPGP key pairs are created locally, and certified by your friends and acquaintances. There is no central certification authority; instead, every individual creates a personal Web Of Trust by certifying other user's key pairs with his own certificate.
You have to enter a Name, EMail and optional a Comment.
- Create a personal X.509 key pair and certification request
X.509 key pairs are created locally, but certified centrally by a certification authority (CA). CAs can certify other CAs, creating a central, hierarchical chain of trust.
The next step in the wizard is to type in your personal data for the certificate. The fields to fill out are:
Common Name (CN): Your name;
Email address (EMAIL): Your email address; be sure to type this in correctly—this will be the address people will be sending mail to when they use your certificate.
Location (L): The town or city in which you live;
Organizational unit (OU): The organizational unit you are in (for example, "Logistics");
Organization (O): The organization you represent (for example, the company you work for);
Country code (C): The two letter code for the country in which you are living (for example, "US");
The next step in the wizard is to select whether to store the certificate in a file or send it directly to a CA. You will have to specify the filename or email address to send the certificate request to.