ZyXEL Communications ZyWall ATP series User Manual page 659

Table 282 Configuration > Object > Certificate > My Certificates > Add (continued)
LABEL
Organization
Town (City)
State, (Province)
Country
Key Type
Key Length
Extended Key Usage
Server Authentication
Client Authentication
IKE Intermediate
Create a self-signed
certificate
Create a certification
request and save it
locally for later
manual enrollment
OK
Cancel
If you configured the My Certificate Create screen to have the Zyxel Device enroll a certificate and the
certificate enrollment is not successful, you see a screen with a Return button that takes you back to the
My Certificate Create screen. Click Return and check your information in the My Certificate Create
screen. Make sure that the certification authority information is correct and that your Internet
connection is working properly if you want the Zyxel Device to enroll a certificate online.
34.11.3.2 The My Certificates Edit Screen
Click Configuration > Object > Certificate > My Certificates and then the Edit icon to open the My
Certificate Edit screen. You can use this screen to view in-depth certificate information and change the
certificate's name.
Chapter 34 Object
DESCRIPTION
Identify the company or group to which the certificate owner belongs. You can use up to
31 characters. You can use alphanumeric characters, the hyphen and the underscore.
Identify the town or city where the certificate owner is located. You can use up to 31
characters. You can use alphanumeric characters, the hyphen and the underscore.
Identify the state or province where the certificate owner is located. You can use up to 31
characters. You can use alphanumeric characters, the hyphen and the underscore.
Identify the nation where the certificate owner is located. You can use up to 31
characters. You can use alphanumeric characters, the hyphen and the underscore.
Select RSA to use the Rivest, Shamir and Adleman public-key algorithm.
Select DSA to use the Digital Signature Algorithm public-key algorithm.
Select a number from the drop-down list box to determine how many bits the key should
use (512 to 2048). The longer the key, the more secure it is. A longer key also uses more PKI
storage space.
Select this to have Zyxel Device generate and store a request for server authentication
certificate.
Select this to have Zyxel Device generate and store a request for client authentication
certificate.
Select this to have Zyxel Device generate and store a request for IKE Intermediate
authentication certificate.
Select this to have the Zyxel Device generate the certificate and act as the Certification
Authority (CA) itself. This way you do not need to apply to a certification authority for
certificates.
Select this to have the Zyxel Device generate and store a request for a certificate. Use the
My Certificate Details screen to view the certification request and copy it to send to the
certification authority.
Copy the certification request from the My Certificate Details screen (see
on page 659) and then send it to the certification authority.
Click OK to begin certificate or certification request generation.
Click Cancel to quit and return to the My Certificates screen.
ZyWALL ATP Series User's Guide
659
Section 34.11.3.2