Openvpn® Server Configuration; Generate Self-Issued Certificate Authority (Ca) - Grandstream Networks GWN70 Series User Manual

Overview
VPN allows the GWN70xx routers to be connected to a remote VPN server using PPTP, IPSec, L2TP, and OpenVPN® protocols,
or configure an OpenVPN® server and generate certificates and keys for clients, VPN page can be accessed from the
GWN70xx Web GUI → VPN.
OpenVPN® Server Configuration
To use the GWN70xx as an OpenVPN® server, you will need to start creating a user account, OpenVPN® server certificates,
and client certificates. Before generating server/client certificates, it is requested to generate first the Certificate Authority
(CA), which will help to issue server/client certificates.
GWN70xx certificates can be managed from Web GUI → System Settings → Certificate Management.

Generate Self-Issued Certificate Authority (CA)

A certificate authority (CA) is a trusted entity that issues electronic documents that verify a digital entity's identity on the
Internet. Electronic documents (a.k.a . digital certificates) are an essential part of secure communication and play an important
part in the public key infrastructure (PKI).
To create a Certification Authority (CA), follow the below steps:
1. Navigate to "Web GUI → System Settings → Certificate Management → CA Certificate"
2. Click on button. A popup window will appear.
3. Enter the CA values including CN, Key Length, and Digest Algorithm ... depending on your needs.
Refer to the below figure showing an example of configuration and the table showing all available options with their
respective descriptions.
Figure 48: Certificate Management