19216811.liveProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual
8-10
Managing Users, Authentication, and Certificates
v1.0, October 2008
•
Serial Number
. This is a serial number maintained by the CA. It is used to identify the
certificate with in the CA.
•
Issuer Name
. The name of the CA that issued the certificate.
•
Expiry Time
. The date on which the certificate expires. You should renew the certificate
before it expires.
Obtaining a Self Certificate from a Certificate Authority
To use a self certificate, you must first request the certificate from the CA, then download and
activate the certificate on your system. To request a self certificate from a CA, you must generate a
Certificate Signing Request (CSR) for your firewall. The CSR is a file containing information
about your company and about the device that will hold the certificate. Refer to the CA for
guidelines on the information you include in your CSR.
To generate a new Certificate Signing Request (CSR) file:
1.
Locate the
Generate Self Certificate Request
section of the Certificates screen.
2.
Configure the following fields:
•
Name
– Enter a descriptive name that will identify this certificate.
•
Subject
– This is the name which other organizations will see as the holder (owner) of the
certificate. Since this name will be seen by other organizations, you should use your
registered business name or official company name. (Using the same name, or a derivation
of the name, in the Title field would be useful.)
•
From the pull-down menus, choose the following values:
–
Hash Algorithm: MD5 or SHA2.
–
Signature Algorithm: RSA.
–
Signature Key Length: 512, 1024, 2048. (Larger key sizes may improve security, but
may also decrease performance.)