Network User's Guide

Security features
87
7
How to create a CSR 7
a Click Create CSR on the Certificate page.
b Enter a Common Name and your information, such as Organization.
NOTE
• We recommend that the Root Certificate from the CA be installed on your computer before creating the
CSR.
• The length of the Common Name must be less than 64 characters. Enter an identifier such as an IP
address, node name, or domain name to use when accessing this printer through SSL/TLS
communication. The node name is displayed by default. The Common Name is required.
• A warning will pop-up if you enter a different name in the URL than the Common Name that was used for
the certificate.
• The length of the Organization, the Organization Unit, the City/Locality and the State/Province must
be less than 64 characters.
•The Country/Region should be an ISO 3166 country code composed of two characters.
• If you are configuring X.509v3 certificate extension, choose the Configure extended partition check box
and then choose Auto (Register IPv4) or Manual.
c You can choose the Public Key Algorithm and Digest Algorithm settings from the drop-down list. The
default settings are RSA(2048bit) for Public Key Algorithm and SHA256 for Digest Algorithm.
d Click Submit.
e When the contents of the CSR appear, click Save to save the CSR file to your computer.
f The CSR is created.
NOTE
• Follow your CA policy regarding the method to send a CSR to your CA.
• If you are using Enterprise root CA of Windows Server
®
2003/2008/2012, we recommend using the Web
Server for the certificate template when creating the Client Certificate for secure management. If you are
creating a Client Certificate for an IEEE 802.1x environment with EAP-TLS authentication, we recommend
using User for the certificate template. For more information, see the SSL communication page from the
top page for your model at http://solutions.brother.com/
.