The My Certificates Edit Screen - ZyXEL Communications UAG5100 User Manual

Table 222 Configuration > Object > Certificate > My Certificates > Add (continued)
LABEL
Organizational Unit
Organization
Town (City)
State (Province)
Country
Key Type
Key Length
Extended Key Usage
Enrollment Options
Create a self-signed
certificate
Create a certification
request and save it
locally for later
manual enrollment
OK
Cancel

44.2.2 The My Certificates Edit Screen

Click Configuration > Object > Certificate > My Certificates and then the Edit icon to open
the My Certificate Edit screen. You can use this screen to view in-depth certificate information
and change the certificate's name.
Chapter 44 Certificates
DESCRIPTION
Identify the organizational unit or department to which the certificate owner belongs.
You can use up to 31 characters. You can use alphanumeric characters, the hyphen
and the underscore.
Identify the company or group to which the certificate owner belongs. You can use up
to 31 characters. You can use alphanumeric characters, the hyphen and the
underscore.
Identify the town or city where the certificate owner is located. You can use up to 31
characters. You can use alphanumeric characters, the hyphen and the underscore.
Identify the state or province where the certificate owner is located. You can use up to
31 characters. You can use alphanumeric characters, the hyphen and the underscore.
Identify the nation where the certificate owner is located. You can use up to 31
characters. You can use alphanumeric characters, the hyphen and the underscore.
Select RSA to use the Rivest, Shamir and Adleman public-key algorithm.
Select DSA to use the Digital Signature Algorithm public-key algorithm.
Select a number from the drop-down list box to determine how many bits the key
should use (512 to 2048). The longer the key, the more secure it is. A longer key also
uses more PKI storage space.
Select Server Authentication to allow a web server to send clients the certificate to
authenticate itself.
Select Client Authentication to use the certificate's key to authenticate clients to the
secure gateway.
Select IKE Intermediate to have the certificate contain the IP Security IKE
Intermediate Object Identifier (OID).
These radio buttons deal with how and when the certificate is to be generated.
Select this to have the UAG generate the certificate and act as the Certification
Authority (CA) itself. This way you do not need to apply to a certification authority for
certificates.
Select this to have the UAG generate and store a request for a certificate. Use the My
Certificate Details screen to view the certification request and copy it to send to the
certification authority.
Copy the certification request from the My Certificate Details screen (see
44.2.2 on page 473) and then send it to the certification authority.
Click OK to begin certificate or certification request generation.
Click Cancel to quit and return to the My Certificates screen.
UAG Series User's Guide
473
Section