beautypg.com

Generating a certificate signing request – Brocade Mobility RFS Controller System Reference Guide (Supporting software release 5.5.0.0 and later) User Manual

Page 742

background image

730

Brocade Mobility RFS Controller System Reference Guide

53-1003099-01

14

2. Define the following configuration parameters required to Create New Self-Signed Certificate:

3. Set the following Certificate Subject Name parameters required for the creation of the

certificate:

4. Select the following Additional Credentials required for the generation of the self signed

certificate:

5. Select the Generate Certificate button at the bottom of the Create Certificate screen to

produce the certificate.

Generating a Certificate Signing Request

Certificates

A certificate signing request (CSR) is a message from a requestor to a certificate authority to apply
for a digital identity certificate. The CSR is composed of a block of encrypted text generated on the
server the certificate will be used on. It contains information included in the certificate, including
organization name, common name (domain name), locality, and country.

Certificate Name

Enter the 32 character maximum name assigned to identify the name of the trustpoint associated with
the certificate. A trustpoint represents a CA/identity pair containing the identity of the CA, CA-specific
configuration parameters, and an association with an enrolled identity certificate.

RSA Key

To create a new RSA key, select Create Key to define a 32 character maximum name used to identify
the RSA key. Use the spinner control to set the size of the key (from 1,024 - 2,048 bits). Brocade
recommends leaving this value at the default setting of 1024 to ensure optimum functionality. To use
an existing key, select Use Existing and select a key from the drop-down menu.

Certificate Subject
Name

Select either auto-generate to automatically create the certificate's subject credentials or user-defined
to manually enter the credentials of the self signed certificate. The default setting is auto-generate.

Country (C)

Define the Country used in the certificate. The field can be modified by the user to other values. This is
a required field and must not exceed 2 characters.

State (ST)

Enter a State/Prov. for the state or province name used in the certificate. This is a required field.

City (L)

Enter a City to represent the city used in the certificate. This is a required field.

Organization (O)

Define an Organization for the organization represented in the certificate. This is a required field.

Organizational Unit
(OU)

Enter an Org. Unit for the organization unit represented in the certificate. This is a required field.

Common Name (CN)

If there’s a common name (IP address) for the organizational unit issuing the certificate, enter it here.

Email Address

Provide an Email Address used as the contact address for issues relating to this certificate request.

Domain Name)

Enter a fully qualified domain name (FQDN) is an unambiguous domain name that specifies the node's
position in the DNS tree hierarchy absolutely. To distinguish an FQDN from a regular domain name, a
trailing period is added. For example, somehost.example.com. An FQDN differs from a regular domain
name by its absoluteness, since a suffix is not added.

IP Address

Specify the IP address used as the destination for certificate requests.