McAfee SG310, Руководство администратора

Страница: 346 / 412

346 McAfee UTM Firewall 4.0.4 Administration Guide
System menu features
Management menu
To create a certificate
1
From the System menu, click Management, and the select the Web tab. The Web Management
Configuration page appears.
2
Click Create SSL certificates. The SSL Certificate Setup page appears ( Figure 352 ).
Figure 352 SSL Certificate Setup page
3
[Optional] Select the appropriate country from the Country list.
4
[Optional] Enter the state or province in the State or Province field.
5
[Optional] Enter the name of your organization in the Organization or Company field.
6
[Optional] Enter your department in the Section or Organization appliance field.
7
Enter the IP address in the Host name field.
8
[Optional] Enter an email address in the Email Address field.
9
Select a certificate key length from the Generate an RSA key of list. Available options are:
• 512 bits (default)
• 1024 bits
• 1536 bits
• 2048 bits
• 3072 bits
• 4096 bits
Note: The more bits in the key, the longer it takes to generate the certificate. Larger keys take much longer
to generate than smaller keys. A 1024-bit key takes more than double the amount of time to generate than
a 512-bit key. Similarly a 4096-bit key takes more than four times as long as it would take for a 1024-bit
key. Patience is advised when generating 4096-bit keys. Key generation is a very CPU-intensive operation
that is not directly related to the effort required to use the key.
10
Click Submit. A message informs you that an SSL certificate is currently being created. Generating a
certificate usually takes a few minutes; exact time depends on the model of UTM Firewall appliance and
the key length. When the certificate has been created, the message “A valid SSL certificate has been
installed” is displayed under the Web tab.