Nortel Networks NN46120-104 User Manual

Page 96

Certificates and Client Authentication

Apply your changes.

>> Certificate 1# apply

Changes applied successfully.

Save the CSR to a file.

Copy the entire CSR, including the

"-----BEGIN

CERTIFICATE REQUEST----- " and "-----END
CERTIFICATE REQUEST----- "

lines, and paste it into a text

editor. Save the file with a

.csr

extension. The name you

define can indicate the server on which the certificate is to be
used.

Save the private key to a file.

Note: Provided you intend to use the same certificate number
when adding the certificate returned to you (after the CSR
has been processed by a certificate authority), this step is
only necessary if you want to create a backup copy of the
private key. When generating a CSR, the private key is
created and stored (encrypted) on the VPN Gateway using the
specified certificate number. When you receive the certificate
(containing the corresponding public key) and add it to the
VPN Gateway, make sure you specify the same certificate
number that is used for storing the private key. Otherwise, the
private key and the public key in the certificate will not match.

Type the

display

command and press ENTER. Choose to

encrypt the private key, and specify a password phrase. Make
sure to remember the password phrase.

Nortel VPN Gateway

User Guide

NN46120-104

02.01

Standard

14 April 2008