Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual page 258

Chapter 11. Managing Certificates
8. Set the key-pair information.
Figure 11.4. Generating the Key Pair
• Set the token, either the security database directory (internal) or one of the listed external
tokens.
• Generate a new key pair. Set the key algorithm and size. The key algorithm must be RSA. The
recommended length for an RSA key is 2048 bits or higher to be crytpographically strong.
9. Select the message digest algorithm; the choices are MC2, MD5, SHA1, SHA256, and SHA512.
236