Novell LINUX ENTERPRISE DESKTOP 11, Руководство пользователя, Страница: 217 / 450

CA Name
Enter the technical name of the CA. Directory names, among other things,
are derived from this name, which is why only the characters listed in the
help can be used. The technical name is also displayed in the overview when
the module is started.
Common Name
Enter the name to use to refer to the CA.
E-Mail Addresses
Several e-mail addresses can be entered that can be seen by the CA user.
This can be helpful for inquiries.
Country
Select the country where the CA is operated.
Organisation, Organisational Unit, Locality, State
Optional values
Proceed with Next.
4 Enter a password in the second dialog. This password is always required when
using the CA—when creating a sub-CA or generating certificates. The text fields
have the following meaning:
Key Length
Key Length contains a meaningful default and does not generally need to be
changed unless an application cannot deal with this key length. The higher
the number the more secure your password is.
Valid Period (days)
The Valid Period in the case of a CA defaults to 3650 days (roughly ten
years). This long period makes sense because the replacement of a deleted
CA involves an enormous administrative effort.
Clicking Advanced Options opens a dialog for setting different attributes from
the X.509 extensions (
Figure 17.4, “YaST CA Module—Extended Settings”
(page 209)). These values have rational default settings and should only be changed
if you are really sure of what you are doing. Proceed with Next.
Managing X.509 Certification 203