AMX NXA-WAPZD1000, Operation/Reference Manual, Page: 111 / 154

Configure Tab
107 NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
Creating a Certificate Signing Request
If you do not have an existing SSL certificate, you will need to create a certificate signing request (CSR) file
and send it to a certificate authority (CA) to purchase an SSL certificate. The Browser-Based Configuration
Pages provide a form that you can use to create the CSR file. Fields with an asterisk (*) are required entries.
Those without an asterisk are optional.
To create a certificate request file:
1.
Go to Configure > Certificate.
2.
In the Generate a Request section, complete the following options:

Common Name*: Enter the NXA-WAPZD1000’s Fully Qualified Domain Name (FQDN).
Typically, this will be “zonedirector.[your company].com”. You can also enter the NXA-
WAPZD1000’s IP address (e.g., “192.168.0.2”), or a familiar name by which the NXA-
WAPZD1000 will be accessed in your browser (e.g., by device name such as “ZoneDirector”).
- If you wish to access the NXA-WAPZD1000 from a public network via the internet, you must use
a Fully Qualified Domain Name (FQDN).
- In all cases when using a familiar name there must be an appropriate private or public DNS entry
to resolve the familiar name to the NXA-WAPZD1000’s IP address.
- If you use a familiar name, this name will be shown in the browser’s URL whenever accessing the
NXA-WAPZD1000 (i.e., administrator interface, standard captive portal and guest access captive
portal).

Subject Alternative Name: (Optional) Select either IP or DNS from the menu and enter either
alternative IP addresses or alternate DNS names.

Organization*: Type the complete legal name of your organization (for example, Ruckus Wireless,
Inc.). Do not abbreviate your organization name.

Organization Unit: (Optional) Type the name of the division, department, or section in your
organization that manages network security (for example, Network Management).

Locality/City*: Type the city where your organization is legally located (for example, Sunnyvale).

State/Province*: Type the state or province where your organization is legally located (for example,
California) Do not abbreviate the state or province name.

Country*: Select your country or region from the pull-down menu.
3.
Click Apply. A dialog box appears and prompts you to save the CSR file (myreq.csr) that you have just
created.
4.
Save the file to your computer.
5.
Go to a certificate authority's Web site and follow the instructions for purchasing an SSL certificate.
6.
When you are prompted for the certificate signing request, copy and paste the content of the text file that
you saved in Step 4., and then complete the certificate purchase.
Using the FQDN as the Common Name if possible is highly recommended. If
your network does not have a DNS server, you may use the NXA-WAPZD1000’s IP
address instead. However, note that some CAs may not allow this.