System-to-System Developer’s Guide v3.0
Confidential Material 12 of 19
o NetSuite Account Number(s): The accounts that require System-to-System access. May include a production
account and a test account. You can obtain your NetSuite account number as follows: NetSuite Home > Set
Up Synchronization (Under Settings Portlet) > Account number is displayed in text box.
o Partner Account Name: Provide a logical name that you would like your NetSuite account provided above to
be referred by (customers only). For example, if your company name is ABC Corp, you might have
ABC_Production and ABC_Test as your account names. Solution providers do not provide a Partner
Account, unless they have made special arrangements with Professional Services to manually configure
account mapping; otherwise, Partner Account is determined dynamically, as established via Single Signon
Account Mapping, discussed below.
o The Certificate Signing Request as an attachment.
Step 4: Add NetSuite certificate and the signed certificate to Certificate Store
NetSuite will e-mail you the signed client certificate (named client.pem in this example), as well as NetSuite’s self-
signed certificate (named NLCACert4Partners.der), that was used to sign your client certificate.
Double click on the NLCACert4Partners.der certificate to install it as a trusted root CA certificate under the
Trusted Root Certification Authorities store for the current user logged into Windows as follows:
• Click Install Certificate …
• Click Next in the Welcome to the Certificate Import Wizard dialog box
• Select the Automatically select the certificate store based on type of certificate radio button and click Next
• Click Finish
Next, convert your certificate into the PKCS12 format by executing the following OpenSSL command. The
PKCS12 format is a certificate store that stores both your signed certificate and private key in one file.
openssl pkcs12 -export -clcerts -in client.pem -inkey client.key -out client.p12
Double click on the client.p12 file to install the certificate in the Personal Certificate Store under the current user
logged into Windows as follows:
• Click Next in the Welcome to the Certificate Import Wizard dialog box
• Click Next in the File Import screen
• Check the Mark this key as exportable check box and click Next
• Select the Automatically select the certificate store based on type of certificate radio button and click Next
• Click Finish
You can verify that these certificates were imported successfully by using Internet Explorer and selecting Tools >
Internet Options > Content > Certificates, and looking at the Personal and Trusted Root Certification Authorities
tabs.
