Black Box RAS-PutIn, Installation And User Manual

Page: 71 / 93

5.5. ADMINISTRATION 59
ˆ
Organizational unit
This field is used for specifying to which department within an organization RAS-PutIn
belongs.
ˆ
Organization
The name of the organization to which RAS-PutIn belongs.
ˆ
Locality/City
The city where the organization is located.
ˆ
State/Province
The state or province where the organization is located.
ˆ
Country
The country where the organization is located. This is the two-letter ISO code, e.g. DE
for Germany or US for the USA.
ˆ
Challenge Password
Some certification authorities require a challenge password to authorize later changes on
the certificate (e.g. revocation of the certificate). The minimal length of this password is
4 characters.
ˆ
Confirm Challenge Password
Confirmation of the Challenge Password
ˆ
Email
The email address of a security contact person that is responsible for RAS-PutIn.
ˆ
Key length
This is the length of the generated key in bits. 1024 Bits are supposed be sufficient for most
cases. Larger keys may result in slower response time of RAS-PutIn during connection
establishment.
However, it is possible to generate and install a new certificate that is unique for a particular
device.
In order to do that, RAS-PutIn is able to generate a new cryptographic key and
the associated so called Certificate Signing Request that needs to be certified by a so called
certification authority (CA). A certification authority verifies that you are who you claim you
are and signs and issues a SSL certificate to you.
The following steps are necessary to create and install a RAS-PutIn SSL certificate:
1. Create a SSL Certificate Signing Request using the panel shown in Figure 5.30 on the
next page (Security Settings
→
SSL Settings
→
Create your own SSL certificate). You
need to fill out a number of fields that are explained above. Once this is done, click
‘Create CSR’ which will initiate the Certificate Signing Request generation. The CSR
can be downloaded to your administration machine with the ‘Download CSR’ button (see
Figure
5.31 on page 61 ).
2. Send the saved CSR to a CA for certification. You will get the new certificate from the
CA after a more or less complicated traditional authentication process (depending on the
CA).
3. Upload the certificate to RAS-PutIn using the ‘Upload’ panel as shown in Figure 5.31 on
page 61 .
After completing these three steps, RAS-PutIn has its own certificate that is used for identifying
the device to its clients.