Generate Server/Client Certificates; Figure 5: Ca Certificate - Grandstream Networks GWN7000 Configuration Manual

Digest Algorithm
Lifetime (days)
Country Code
State or Province
City
Organization
Organization Unit
Email Address
4. Click on
5. Click on button to export the CA to local computer. The CA file has extension ".crt".

Generate Server/Client Certificates

Users need to create both server and client certificates for encrypted communication between clients and
GWN7000 acting as an OpenVPN® server.
❖ Creating Server Certificate
To create server certificate, follow below steps:
1. Go to "System Settings > Cert. Manager > Certificates".
Choose the digest algorithm:
•
SHA1: This digest algorithm provides a 160-bit fingerprint
output based on arbitrary length input.
•
SHA-256: This digest algorithm generates an almost-
unique, fixed size 256-bit (32-byte) hash. Hash is a one-way
function – it cannot be decrypted back.
Enter the validity date for the CA certificate in days.
In our example, set to "120".
Select a country code from the dropdown list.
In our example, set "MA".
Enter a state name or province.
In our example, set to "Casablanca".
Enter a city name.
In our example, set to "Casablanca".
Enter the organization name.
In our example, set to "GS".
Enter the organization unit name.
In our example, set to "Gs".
Enter an email address.
In our example its "grandstream@gmail.com"
button after completing all the fields for the CA certificate.

Figure 5: CA Certificate

GWN7000 VPN Guide
P a g e | 8