Figure 59 Open Ssl Example - ZyXEL Communications NSA-2400 User Manual

Chapter 8 Maintenance Screens
6 After you have entered this information, type exit.
OpenSSL> exit
7 Click Start > Run, then type C:\OpenSSL\bin\. Windows Explorer should
appear and you should see two new files located in the folder.

Figure 59 Open SSL Example

• myssl.key is the private key data which you will need to upload to the NSA device.
• myssl.csr is the Certificate Signing Request which you need to submit to a Certificate
Authority (CA) to sign and approve this certificate request. A CA issues certificates and
guarantees the identity of each certificate owner. There are commercial certification
authorities like CyberTrust or VeriSign and government certification authorities.
8 Submit your CSR to your CA. Each CA has its own procedure to sign certificates. Note
from when and for how long the signed certificate is valid. After a period of time, the
certificate will expire and you will need to renew it with your CA. After your CA signs
the certificate, you will have the actual certificate file (usually with file extension crt or
cer).
9 Import the certificate into your web browser (see
example of how to do that).
10 Log into the NSA-2400 Web configurator and go to the the Maintenance > Security
screen
using the My Certificate field and the private key file (myssl.key in this example) using
the Private Key File field.
If successful, the NSA-2400 will prompt you to log in again. Depending on which browser
you have, you should be able to view the certificate's details and confirm that it is the new
certificate. If your web browser still continues to display invalid SSL certificate messages,
check the following:
• The certificate name and NSA-2400 system or domain name match. If they don't, create
the key again but make sure that the common name is the same domain name you use to
access your NSA-2400. For example, if your NSA-2400 domain name is
nsa.zyxel.com, then make sure the common name is exactly the same. If you use an
IP address to access your NSA-2400, then set the common name to the IP address of the
NSA-2400.
124
(Figure 58 on page 122). Upload the certificate file (myssl.csr in this example)
Appendix D on page 165
NSA-2400 User's Guide
for a generic