Creating Certificates; Installing Certificates And Keys - Nortel Secure Network Access Switch 4050 User Manual

Creating certificates

The basic steps to create a new certificate are:
1
Generate a Certificate Signing Request (CSR) (see
submitting a CSR using the CLI" on page 579
a CSR using the SREM" on page
2
Send the CSR to a Certificate Authority (CA), such as Entrust or VeriSign, for
certification (see
page 579
page 601).
3
Install the signed certificate on the Nortel SNAS 4050 cluster (see
certificates and keys" on page
4
Map the installed certificate to the Nortel SNAS 4050 portal server (see
"Configuring SSL settings using the CLI" on page 139
settings using the SREM" on page

Installing certificates and keys

There are two ways to install a certificate and key in the Nortel SNAS 4050
cluster:
• by pasting (see
on page
• by importing from a TFTP/FTP/SCP/SFTP server (see
and keys into the Nortel SNAS 4050 using the CLI" on page 588
"Importing a certificate or key using the SREM" on page
When you generate the CSR, the private key is created and stored in encrypted
form on the Nortel SNAS 4050 using the specified certificate number. After you
receive the certificate, which contains the corresponding public key, use the same
certificate number when you add the certificate to the Nortel SNAS 4050.
Otherwise, the private key and the public key in the certificate will not match.
If you do not generate a CSR but obtain the certificate by other means, you must
take additional steps to add a private key that corresponds to the public key of the
certificate (see
page 587).
"Generating and submitting a CSR using the CLI" on
or "Generating and submitting a CSR using the SREM" on
"Adding a certificate to the Nortel SNAS 4050 using the CLI"
584)
"Adding a private key to the Nortel SNAS 4050 using the CLI" on
Nortel Secure Network Access Switch 4050 User Guide
Chapter 11 Managing certificates 573
or "Generating and submitting
601).
573).
176).
"Generating and
"Installing
or "Configuring SSL
"Importing certificates
or
603)