Administrator Guide

134 | Onboard Dell Networking W-ClearPass Guest 6.5.0 | User Guide
n When this option is selected, the issued certificate will contain an extension identifying it as an
intermediate certificate authority, and the extended key usage property will contain the three values
“Client Auth”, “Server Auth” and “OCSP Signing”.
l Code Signing—Use this option for signing the Windows provisioning application.
l HTTPS—Use this option to create certificates suitable for use as HTTPS server certificates.
Specifying the Identity of the Certificate Subject
In the first part of the Certificate Request Settings form, provide the identity of the person or device for which
the certificate is to be issued (the “subject” of the certificate). Together, these fields are collectively known as a
distinguished name, or “DN”:
l Country
l State
l Locality
l Organization
l Organizational Unit
l Common Name – this is the primary name used to identify the certificate
l Email Address
The Key Type drop-down list specifies the type of private key that should be created for the certificate. You
can select one of these options:
l 1024-bit RSA – lower security
l 2048-bit RSA – recommended for general use
l 4096-bit RSA – higher security
Using a private key containing more bits will increase security, but will also increase the processing time required to
create the certificate and authenticate the device. The additional processing required will also affect the battery life
of a mobile device. It is recommended to use the smallest private key size that is feasible for your organization.