Chapter 15: Advanced Administration
274
a. Encryption Mode: If Require AES Encryption between Client and
Server is selected in the Administration > Security > Encryption
screen, AES-128 is the default. If AES is not required, DES 3 is
the default.
b. Private Key Length: 1024 is the default.
c. Validity Period (days): Maximum 4 numeric characters.
d. Country Code: CSR tag is Country Name.
e. State or Province: Maximum 64 characters. Type in the whole
state or province name. Do not abbreviate.
f.
City/Locality: CSR tag is Locality Name. Maximum 64
characters.
g. Registered Company Name: CSR tag is Organization Name.
Maximum 64 characters.
h. Division/Department Name: CSR tag is Organization Unit Name.
Maximum 64 characters.
i.
Fully Qualified Domain Name: CSR tag is Common Name.
j.
Administrator Email Address: Type in the email address of the
administrator who is responsible for the certificate request.
k. Challenge Password: Maximum 64 characters.
5. Click OK to generate the CSR. The CSR and Private Key appear in
the corresponding fields of the Certificate screen.
6. Select the text in the Certificate Request box, and then press Ctrl+C
to copy it. Using an ASCII editor such as Notepad, paste the CSR
into a file and save it with a .cer extension.
7. Select the text in the Private Key box, and then press Ctrl+C to copy
it. Using an ASCII editor such as Notepad, paste the Private Key into
a file and save it with a .txt extension.
8. Submit the .cer file to the Certificate Server to obtain a signed
certificate.
9. Download or export the root certificate from the Certificate Server
and save it to a file with a .cer extension. This is a different certificate
from the signed certificate that will be issued by the Certificate
Server in the next step.
10. Click Browse next to CA file and select the root certificate file.
11. Once you receive the signed certificate from the Certificate Server,
select Import pasted certificate and private key.
12. Copy the text of the signed certificate, and then press Ctrl+V to paste
it into the Certificate box.
13. Copy the text of the Private Key previously saved as a .txt file, and
then press Ctrl+V to paste it into the Private Key box.
