
Field
Description
Also select the length of the key to be created.
Possible values:
,
FDE
,
-
,
CD
,
-E
,
-BD
.
Please note that a key with a length of 512 bits could be rated
as unsecure, whereas a key of 4096 bits not only needs a lot of
time to create, but also occupies a major share of the re-
sources during IPSec processing. A value of 768 or more is,
however, recommended and the default value is 1024 bits.
SCEP URL
Only for Mode =
36
Enter the URL of the SCEP server, e.g. ht-
tp://scep.bintec-elmeg.com:8080/scep/scep.dll
Your CA administrator can provide you with the necessary
data.
CA Certificate
Only for Mode =
36
Select the CA certificate.
• In
'' 8" ''
: In CA Name, enter the name of the
CA certificate of the certification authority (CA) from which
you wish to request your certificate, e.g.
8"8!
. Your
CA administrator can provide you with the necessary data.
If no CA certificates are available, the device will first down-
load the CA certificate of the relevant CA. It then continues
with the enrolment process, provided no more important
parameters are missing. In this case, it returns to the Gener-
ate Certificate Request menu.
If the CA certificate does not contain a CRL distribution point
(Certificate Revocation List, CRL), and a certificate server is
not configured on the device, the validity of certificates from
this CA is not checked.
• <name of an existing certificate>: If all the necessary certific-
ates are already available in the system, you select these
manually.
RA Sign Certificate
Only for Mode =
36
Only for CA Certificate not =
'' 8" ''
Gigaset Communications GmbH
2 System Management
hybird 120 Gigaset Edition
45