PoE
AP
Router
152
Local
Certificate
Configuration
Item
Value
setting
Description
Name
1.
String
format
can
be
any
text
2.
A
Must
filled
setting
Enter
a
certificate
name.
It
will
be
a
certificate
file
name
If
Self
‐
signed
is
checked,
it
will
be
signed
by
root
CA.
If
Self
‐
signed
is
not
checked,
it
will
generate
a
certificate
signing
request
(CSR).
Key
A
Must
filled
setting
This
field
is
to
specify
the
key
attributes
of
certificate.
Key
Type
to
set
public
‐
key
cryptosystems.
Currently,
only
RSA
is
supported.
Key
Length
to
set
the
length
in
bits
of
the
key
used
in
a
cryptographic
algorithm.
It
can
be
512/768/1024/1536/2048.
Digest
Algorithm
to
set
identifier
in
the
signature
algorithm
identifier
of
certificates.
It
can
be
MD5/SHA
‐
1.
Subject
Name
A
Must
filled
setting
This
field
is
to
specify the
information
of
certificate.
Country(C)
is
the
two
‐
letter
ISO
code
for
the
country
where
your
organization
is
located.
State(ST)
is
the
state
where
your
organization
is
located.
Location(L)
is
the
location
where
your
organization
is
located.
Organization(O)
is
the
name
of
your
organization.
Organization
Unit(OU)
is
the
name
of
your
organization
unit.
Common
Name(CN)
is
the
name
of
your
organization.
is
the
of
your
organization.
It
has
to
be
address
setting
only.
Extra
Attributes
A
Must
filled
setting
This
field
is
to
specify the
extra
information
for
generating
a
certificate.
Challenge
Password
for
the
password
you
can
use
to
request
certificate
revocation
in
the
future.
Unstructured
Name
for
additional
information.
SCEP
Enrollment
A
Must
filled
setting
This
field
is
to
specify the
information
of
SCEP.
If
user
wants
to
generate
a
certificate
signing
request
(CSR)
and
then
signed
by
SCEP
server
online,
user
can
check
the
Enable
box.
Select
a
SCEP
Server
to
identify
the
SCEP
server
for
use.
The
server
detailed
information
could
be
specified
in
External
Servers.
Refer
to
Object
Definition
>
External
Server
>
External
Server
.
You
may
click
Add
Object
button
to
generate.
Select
a
CA
Certificate
to
identify
which
certificate
could
be
accepted
by
SCEP
server
for
authentication.
It
could
be
generated
in
Trusted
Certificates.
Select
an
optional
CA
Encryption
Certificate
,
if
it
is
required,
to
identify
which
certificate
could
be
accepted
by
SCEP
server
for
encryption
data
information.
It
could
be
generated
in
Trusted
Certificates.
Fill
in
optional
CA
Identifier
to
identify
which
CA
could
be
used
for
signing
certificates.
Save
N/A
Click
the
Save
button
to
save
the
configuration.
Back
N/A
When
the
Back
button
is
clicked,
the
screen
will
return
to
previous
page.
When
Import
button
is
applied,
an
Import
screen
will
appear.
You
can
import
a
certificate
from
an
existed
certificate
file,
or
directly
paste
a
PEM
encoded
string
as
the
certificate.
