The documentation in version 9.0 and up is no longer asking to remove the password from the private key prior generating a CSR file. Compare this documentation... https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/Getthird-partycertificatesforSplunkWeb vs. This one... https://docs.splunk.com/Documentation/Splunk/8.2.9/Security/Getthird-partycertificatesforSplunkWeb That says: Remove the password from the private key. You must do this because Splunk Web does not support private key passwords. In my case... I am using Splunk version 9.0.2 and my private key (.key file) has password. I use it on web conf under sslPassword
... View more