HP X Unified Security Platform Series User Manual Page 278

  • Download
  • Add to my manuals
  • Print
  • Page
    / 333
  • Table of contents
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 277
Chapter 9 Authentication
262 X Family LSM User’s Guide V 2.5.1
Managing Certificate Requests
You can perform the following managment functions from the Certificate Request page:
For details, see the following sections:
Create a Certificate Request” on page 262
Import a signed Local Certificate” on page 263
X.509 Certificates” on page 255
Create a Certificate Request
STEP 1
From the LSM menu, select Authentication > X.509 Certificates. On the CA Certificate
page, click the Certificate Requests tab.
STEP 2
On the Certificate Requests page, click Create Certificate.
STEP 3
On the Create Certificate Request page, type a name for the Certificate Request in the Name
field.
This is the name used by the Local Certificate when you later import the signed Local
Certificate.
STEP 4
Select the length for the private key from the Length drop-down list, either 1024 bits, 1536
bits or 2048 bits.
STEP 5
In the Distinguished Name table, define the Distinguished Name attributes for the Certifi-
cate Request:
Table 9–8: Certificate Request Functions
Function Icon/Field Description
Import
Signed Local
Certificate
Import
Signed
Request
table
When you receive a signed certificate from the Certificate Authority, you can
import the certificate so that it is available on the X family device. When you
import a signed certificate from the Certificate Requests page, the certificate
request generated to obtain the signed certificate is automatically deleted.
Create a
Certificate
Request
Create
Certificate
Request
button
Access the Create a Certificate Request page to specify the parameters and
Distinguished Name attributes for the request, and generate the Certificate
Request in PKCS#10 format.
Export A Certificate Request must be exported to a file before it can be submitted to
the CA (either by a web-based service or by email).
Certificate Requests are exported in
PKCS#10 format
, which includes the
Distinguished Name (DN) and the Public Key. A request is signed by the
Private Key of the requester so that the CA can verify authenticity.
Delete If a Certificate Request is no longer needed, use the Delete function to remove
it from the X family device.
The device automatically deletes Certificate Requests when you import the
signed local certificate received from the Certificate Authority.
Page view 277
1 ... 277 278 279 ... 333

Comments to this Manuals

No comments