Stormshield SN series Configuration Manual page 68

Locality (L)
State or province (ST) State or province in which your company is located (e.g.: Nord).
Country (C)
Click on Next.
Next, you will need to secure access to your authority.
In this step of the PKI configuration wizard, you will need to enter a password that will allow you
to protect your certificate authority's private key.
You are advised against choosing passwords that are too easy. We recommend that you
mix uppercase and lowercase letters with numbers and special characters.
Certificate authority password
Password (min. 8 char) Enter a password of at least 8 characters in order to protect access to your CA.
Confirm password
Mandatory password
strength
E-mail address
Entering your e-mail address in this field will allow you to receive a message confirming that your
authority has been created.
Key size (bits)
When you create a CA, you need to select the size of the key that the firewall will generate in order
to allow traffic encryption. The larger the key, the more secure it is.
4 key sizes (in bits) are available:
1024
1536
2048
4096
The computation of big keys may slow down your Stormshield Network appliance.
Page 68/448
City in which your company is located (e.g.: Villeneuve d'Ascq).
Select from the list the country in which your company is located (e.g.: France).
Warning
Warning
The firewall will not save this password. If you forget your password, you will
need to reinitialize the PKI and as such, you will lose the configuration
parameters that you had defined for it.
Type your password again in this field in order to confirm it.
This field indicates your password's level of security: "Very Weak", "Weak", "Medium",
"Good" or "Excellent".
You are strongly advised to use uppercase letters and special characters.
If you select this key size, the password generated for your authority will be 1024 bits.
NOTE
This number corresponds to 1024 characters visible in the console on your
workstation.
If you select this key size, the password generated for your authority will be 1536 bits.
If you select this key size, the password generated for your authority will be 2048 bits.
If you select this key size, the password for your authority should not exceed 4096
bits.
Warning
Even though large keys are more effective, you are advised against using this
key with entry-level appliances as this will mean the key will take a long time to
be generated.
NOTE
SNS - USER CONFIGURATION MANUAL V.3
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
CERTIFICATES AND PKI