Extreme Networks Altitude 4000 Series, Справочное руководство, Страница: 151 / 521

Assigning Certificates
Altitude
TM
4000 Series Access Point System Reference Guide
151
4 Set the following Certificate Subject Name parameters required for the creation of the certificate:
5 Select the following Additional Credentials required for the generation of the self signed certificate:
6 Select the Generate Certificate button at the bottom of the screen to produce the certificate.
Generating a Certificate Signing Request
“Assigning Certificates”
A certificate signing request (CSR) is a message from a requestor to a certificate authority to apply for a
digital identity certificate. The CSR is composed of a block of encrypted text generated on the server the
certificate will be used on. It contains information included in the certificate, including organization
name, common name (domain name), locality and country.
A RSA key must be either created or applied to the certificate request before the certificate can be
generated. A private key is not included in the CSR, but is used to digitally sign the completed request.
The certificate created with a particular CSR only worked with the private key generated with it. If the
private key is lost, the certificate is no longer functional. The CSR can be accompanied by other identity
credentials required by the certificate authority, and the certificate authority maintains the right to
contact the applicant for additional information.
If the request is successful, the CA sends an identity certificate digitally signed with the private key of
the CA.
To create a CSR:
Certificate Subject
Name Select either the auto-generate radio button to automatically create the
certificate's subject credentials or select user-defined to manually enter the
credentials of the self CA certificate. The default setting is auto-generate.
Country (C) Define the Country of deployment for the certificate. The field can be
modified by the user to other values. This is a required field and must not
exceed 2 characters.
State (ST) Enter a State for the state or province name used in the certificate. This is a
required field.
City (L) Enter a City to represent the city name used in the certificate. This is a
required field.
Organization (O) Define an Organization for the organization used in the certificate. This is a
required field.
Organizational Unit
(OU) Enter an Organizational Unit for the name of the organization unit used in
the certificate. This is a required field.
Common Name (CN) If there’s a common name (IP address) for the organizational unit issuing the
certificate, enter it here.
Email Address Provide an email address used as the contact address for issues relating to
this certificate request.
Domain Name Enter a fully qualified domain name (FQDN) as an unambiguous domain
name that specifies the node's position in the DNS tree hierarchy. To
distinguish an FQDN from a regular domain name, a trailing period is added.
For example, somehost.example.com. An FQDN differs from a regular
domain name by its absoluteness, since s a suffix is not added.
IP Address Specify the IP address used as the destination for certificate requests.