Login into WAS Admin Console
Login into WAS Admin Console: https://<WAS_ADMIN_HOST>:<WAS_ADMIN_PORT>/ibm/console
Navigate to certificate configuration section
Go to Security (Left Nav) -> SSL certificate and key management and click on Key stores and certificates link
Select the KeyStore
Click on NodeDefaultKeyStore
Navigate to certificate request section
Under Additional Properties, click on Personal certificate requests
Start with new certificate request creation
Click on New
Enter the certificate request details
Provide all the necessary details and click on Apply.
Confirm the entered details
The CSR details can be seen as below. Click on Save.
CSR creation successful
Get the CSR file
The CSR file can be obtained from the WAS machine from the highlighted location, File for certificate request.
Send to CA
This CSR file can be sent to any of the Certifying Authority (CA) to receive a signed certificate.
Based on this CSR, CA will provide a signed certificate. To receive this certificate in WAS, please refer to my recipe https://developer.ibm.com/recipes/tutorials/ssl-certificate-receipt-in-websphere-application-server-was/