Safran SecureSync 2400 User Manual page 102

2.14 Configure Network Settings
5. When the form is complete, confirm that you checked the box
86
Email Address: This is the email address of the organization creating
the Certificate.
Challenge Password: Valid response password to server challenge.
Optional Organization
creating the Certificate.
Self-Signed Certificate Expiration
the Certificate expires. The default is 7200.
You are required to select a signature algorithm, a private key passphrase
of at least 4 characters, a private key bit length, and the Certificate expir-
ation in days. The remaining fields are optional.
It is recommended that you consult your Certificate Authority for the
required fields in an X 509-Certificate request. Safran recommends all fields
be filled out and match the information given to your Certificate Authority.
For example, use all abbreviations, spellings, URLs, and company depart-
ments recognized by the Certificate Authority. This helps to avoid prob-
lems the Certificate Authority might otherwise have reconciling Certificate
request and company record information.
If necessary, consult your web browser vendor's documentation and Cer-
tificate Authority to see which key bit lengths and signature algorithms
your web browser supports.
Safran recommends that when completing the Common Name field, the
user provide a static IP address, because DHCP-generated IP addresses can
change. If the hostname or IP address changes, the X.509 Certificate must
be regenerated.
It is recommended that the RSA Private Key Bit Length be a power of 2 or
multiple of 2. The key bit length chosen is typically 1024, but can range from
512 to 4096. Long key bit lengths of up to 4096 are not recommended
because they can take several hours to generate. The most common key bit
length is the value 1024.
Note: The default key bit length value is 2048.
When using a self-signed Certificate, choose values based on your com-
pany's security policy.
Signed Certificate at the top of the window, then click Submit. Clicking the
Submit button automatically generates the Certificate Request in the
proper format for subsequent submission to the Certificate Authority.
Name: An optional name for the organization
(Days): How many days before
CHAPTER •
2 SecureSync 2400 User Manual Rev. 5.2
Create Self