Fields in the Certificate ListCertificate Request menu
Field
Description
Certificate Request De-
scription
Enter a unique description for the certificate.
Mode
Select the way in which you want to request the certificate.
Possible settings:
•
(/
(default value): Your device generates a PKCS#10
for the key. This file can then be uploaded directly in the
browser or copied in the
menu using the
View details
field. This file must be provided to the CA and the received
certificate must then be imported manually to your device.
•
-6
: The key is requested from a CA using the Simple Cer-
tificate Enrolment Protocol.
Generate Private Key
Only for
Mode
=
(/
Select an algorithm for key creation.
=-1
(standard value) and
3-1
are available.
Also select the length of the key to be created.
Possible values:
,
.
,
,
'
,
,
.
Please note that a key with a length of 512 bits could be rated
as unsecure, whereas a key of 4096 bits not only needs a lot of
time to create, but also occupies a major share of the resources
during IPSec processing. A value of 768 or more is, however,
recommended and the default value is 1024 bits.
SCEP URL
Only for
Mode
=
-6
Enter the URL of the SCEP server, e.g. ht-
tp://scep.funkwerk.de:8080/scep/scep.dll
Your CA administrator can provide you with the necessary data.
CA Certificate
Only for
Mode
=
-6
Select the CA certificate.
10 System Management
Funkwerk Enterprise Communications GmbH
116
R1xxx/R3xxx/R4xxx
