Cambium Networks ePMP, User Manual

Page: 286 / 478

CAMBIUM NETWORKS
026v003
286

Edit the following lines:
ROOTCA = "cambium"
root CA name - Filename of the root certificate (without the suffix '-
ca')
O = "Cambium Networks" - Name of the organization
C = "UA" - country
ST = "Euro" - staff
L = "Kiev" - city
OU = "Cambium" - unit
EMAIL = email@cambium.com - email
BITS = 2048 - Size of the generated key in bits
CLIENT_DAYS = 730 - Client certificate validity period in days
SERVER_DAYS = 1461 - Server certificate validity period in days
Lines related to the country, city, department, email, etc must be fixed (though not
necessarily, this is default values that can be changed in the process of creating the
certificate). Variables related to the terms of validity of the certificate can be left without
changes.
Creating a server certificate (for RADIUS)
1. Create a server certificate (option cerver_cert), file name (and certificate)
radius.cambium.com.
. / sign_cert.sh server_cert radius.cambium.com
create certificate key: radius.cambium.com.key
Generating RSA private key, 2048 bit long modulus
....... + + +
.................................. + + +
e is 65537 (0x10001)
# First generates key, it is necessary enter the password which will close the key
Enter pass phrase for radius.cambium.com.key:
Verifying - Enter pass phrase for radius.cambium.com.key:
decrypt certificate key: radius.cambium.com.crt
Enter pass phrase for radius.cambium.com.key:
writing RSA key
# Create a certificate request
Create certificate request: radius.cambium.com.csr
. / sign_cert.sh radius.cambium.com server_cert
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a
DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
2. Then you must specify the fields you want, like for the root certificate. Default values have
already populated in square brackets. To use them simply click ENTER.

Your Country Name (2 letter country code):

State or Province Name (full name):