Spectracom NetClock 9400 Series, User Reference Manual

Page: 88 / 467

helps to avoid problems the Certificate Authority might otherwise have reconciling Cer
tificate request and company record information.
If necessary, consult your web browser vendor’s documentation and Certificate Authority
to see which key bit lengths and signature algorithms your web browser supports.
Spectracom recommends that when completing the Common Name field, the user
provide a static IP address, because DHCP-generated IP addresses can change. If the
hostname or IP address changes, the X.509 Certificate must be regenerated.
It is recommended that the RSA Private Key Bit Length be a power of 2 or multiple of 2.
The key bit length chosen is typically 1024, but can range from 512 to 4096. Long key
bit lengths of up to 4096 are not recommended because they can take several hours to
generate. The most common key bit length is the value 1024.
Note: The default key bit length value is 2048.
When using a self-signed Certificate, choose values based on your company’s security
policy.
6.
When the form is complete, confirm that you checked the box Create Self Signed Cer
tificate at the top of the window, then click Submit . Clicking the Submit button auto
matically generates the Certificate Request in the proper format for subsequent
submission to the Certificate Authority.
Note:
It may take several minutes for NetClock to create the Certificate
request and the private key (larger keys will require more time than small
keys). If the unit is rebooted during this time, the Certificate will not be cre
ated.
To view the newly generated request, in the HTTPS Setup window, click the Certificate
Request tab.
72
CHAPTER
2
•
NetClock User Reference Guide Rev. 16
2.14 Configuring Network Settings