ZyXEL Communications ZyWall USG 2000 User Manual page 672

Chapter 43 Certificates
Table 211 Object > Certificate > My Certificates > Add (continued)
LABEL
Common Name
Organizational Unit Identify the organizational unit or department to which the
Organization
Country
Key Type
Key Length
Enrollment Options These radio buttons deal with how and when the certificate is to be
Create a self-
signed certificate
Create a
certification
request and save it
locally for later
manual enrollment
672
DESCRIPTION
Select a radio button to identify the certificate's owner by IP
address, domain name or e-mail address. Type the IP address (in
dotted decimal notation), domain name or e-mail address in the
field provided. The domain name or e-mail address is for
identification purposes only and can be any string.
A domain name can be up to 255 characters. You can use
alphanumeric characters, the hyphen and periods.
An e-mail address can be up to 63 characters. You can use
alphanumeric characters, the hyphen, the @ symbol, periods and
the underscore.
certificate owner belongs. You can use up to 31 characters. You can
use alphanumeric characters, the hyphen and the underscore.
Identify the company or group to which the certificate owner
belongs. You can use up to 31 characters. You can use alphanumeric
characters, the hyphen and the underscore.
Identify the nation where the certificate owner is located. You can
use up to 31 characters. You can use alphanumeric characters, the
hyphen and the underscore.
Select RSA to use the Rivest, Shamir and Adleman public-key
algorithm.
Select DSA to use the Digital Signature Algorithm public-key
algorithm.
Select a number from the drop-down list box to determine how
many bits the key should use (512 to 2048). The longer the key, the
more secure it is. A longer key also uses more PKI storage space.
generated.
Select Create a self-signed certificate to have the ZyWALL
generate the certificate and act as the Certification Authority (CA)
itself. This way you do not need to apply to a certification authority
for certificates.
Select Create a certification request and save it locally for
later manual enrollment to have the ZyWALL generate and store
a request for a certificate. Use the My Certificate Details screen to
view the certification request and copy it to send to the certification
authority.
Copy the certification request from the My Certificate Details
screen (see Section 43.2.2 on page
certification authority.
675) and then send it to the
ZyWALL USG 2000 User's Guide