10: Security Settings
EDS-MD® Medical Device Server User Guide
77
Certificate and Key Generation
The EDS-MD device server can generate self signed certificates and their corresponding keys.
This can be done for both the rsa and dsa certificate formats. Certificates can be identified on the
EDS-MD unit by a name provided at generation time.
Table 10-8 Certificate and Key Generation Settings
To Configure an Existing SSL Credential
Follow these steps after a new credential has been established via
.
Using Web Manager
To configure an existing SSL Credential, click
SSL
in the menu, select
Credentials
, and click
on the name of an existing SSL credential.
Certificate Generation
Settings
Description
Country (2 Letter Code)
Enter the 2-letter country code to be assigned to the new self-signed
certificate.
Examples: US for United States and CA for Canada
State/Province
Enter the state or province to be assigned to the new self-signed certificate.
Locality (City)
Enter the city or locality to be assigned to the new self-signed certificate.
Organization
Enter the organization to be associated with the new self-signed certificate.
Organization Unit
Enter the organizational unit to be associated with the new self-signed
certificate.
Common Name
Enter the common name to be associated with the new self signed
certificate, preferably matching the host name or the ip address of the
device, whichever will be the intended access approach. This is a required
field.
Expires
Enter the expiration date, in mm/dd/yyyy format, for the new self-signed
certificate.
Example: An expiration date of May 9, 2018 is entered as 05/09/2018.
Type
Select the type of key:
RSA
= Public-Key Cryptography algorithm based on large prime
numbers, invented by Rivest Shamir and Adleman. Used for encryption
and signing.
DSA
= Digital Signature Algorithm also based on large prime numbers,
but can only be used for signing. Developed by the US government to
avoid the patents on RSA.
Key Length
Select the bit size of the new self-signed certificate. Choices are:
512 bit
768 bit
1024 bit
2048 bit
The larger the bit size, the longer it takes to generate the key.
Submit (button)
Click the
Submit
button after setting the information for new self-signed
certificate.