If your research group is running its own webserver and not using the ITS webserver, you might want an SSL certificate. ITS can issue SSL certificates for hosts in DNS zones under ITS control such as ece.cmu.edu, cit.cmu.edu, etc.
Please send a request to Help asking for a certificate, with some sort of documentation or justification that you are authorized.
Your process should go something like this:
openssl genrsa -out <keyfile> 2048
openssl req -new -key <keyfile> -out <csrfile.csr>
And then attach that CSR to your request to Help. Be very careful to ensure that your private key does not get sent or live anywhere in an unecrypted state.
