Table of Contents
Advertisement
5 - 178 WiNG 5 Access Point System Reference Guide
Country (C)
State (ST)
City (L)
Organization (O)
Organizational Unit
(OU)
Common Name (CN)
5. Select the following
Email Address
Domain Name
IP Address
6. Select the
5.6.4 Generating a Certificate Signing Request
Assigning Certificates
A certificate signing request (CSR) is a message from a requestor to a certificate authority to apply for a digital
identity certificate. The CSR is composed of a block of encrypted text generated on the server the certificate will be
used on. It contains information included in the certificate, including organization name, common name (domain
name), locality and country.
A RSA key must be either created or applied to the certificate request before the certificate can be generated. A
private key is not included in the CSR, but is used to digitally sign the completed request. The certificate created with
a particular CSR only worked with the private key generated with it. If the private key is lost, the certificate is no
longer functional. The CSR can be accompanied by other identity credentials required by the certificate authority, and
the certificate authority maintains the right to contact the applicant for additional information.
If the request is successful, the CA sends an identity certificate digitally signed with the private key of the CA.
To create a CSR:
1. Select the
(within the Certificate Management screen).
Define the Country of deployment for the certificate. The field can be modified
by the user to other values. This is a required field and must not exceed 2
characters.
Enter a State for the state or province name used in the certificate. This is a
required field.
Enter a City to represent the city name used in the certificate. This is a required
field.
Define an Organization for the organization used in the certificate. This is a
required field.
Enter an Organizational Unit for the name of the organization unit used in the
certificate. This is a required field.
If there's a common name (IP address) for the organizational unit issuing the
certificate, enter it here.
Additional Credentials
Provide an email address used as the contact address for issues relating to this
certificate request.
Enter a fully qualified domain name (FQDN) as an unambiguous domain name
that specifies the node's position in the DNS tree hierarchy. To distinguish an
FQDN from a regular domain name, a trailing period is added. For example,
somehost.example.com. An FQDN differs from a regular domain name by its
absoluteness, since s a suffix is not added.
Specify the IP address used as the destination for certificate requests.
Generate Certificate
button at the bottom of the screen to produce the certificate.
Launch Manager
button from either the SSH RSA Key or RADIUS Server Certificate parameters
required for the generation of the self signed certificate:
Hide quick links:
Advertisement
Table of Contents
