D-Link DWC-1000 [253/368] Self certificate requests

D-Link DWC-1000 User Manual 253

Section 7 - VPN

Self Certicate Requests

TorequestaselfcerticatetobesignedbyaCA,youcangenerateaCerticateSigningRequestfromtheswitch

by entering identication parameters and passing it along to the CA for signing. Once signed, the CA’s Trusted

Certicate and signed certicate from the CA are uploaded to activate the self -certicate validating the identity

ofthisswitch.TheselfcerticateisthenusedinIPSecandSSLconnectionswithpeerstovalidatetheswitch’s

authenticity.

To generate a certicate signing request:

This eld will populate the CN (Common Name) entry of the generatedcerticate.Subject names are

usually dened in the following format: CN=<device name>, OU=<department>, O=<organization>,

L=<city>, ST=<state>, C=<country>. For example: CN=router1, OU=my_company, O=mydept, L=SFO,

C=US.

Hash Algorithm Select the algorithm from the drop-down menu. Select either MD5 or SHA-1.

Signature Key Length Select the signature key length from the drop-down menu. Select either 512, 1024, or 2048

Application Type Select the application type from the drop-down menu. Select either HTTPS or IPSec.