Users Guide

273 Dell Networking W-ClearPass Policy Manager 6.2 | User Guide
Table 163:
Create Certificate Signing Request
Container Description
Common
Name (CN)
Name associated with this entity. This can be a host name, IP address or other
meaningful name.
This field is required. The default is the fully-qualified domain name (FQDN).
Organization
(O)
Name of the organization.
This field is optional.
Organizational
Unit (OU)
Name of a department, division, section, or other meaningful name.
This field is optional.
Location (L) State, country, and/or another meaningful location.
These fields are optional.
State (ST)
Country (C)
Subject
Alternate
Name (SAN)
Alternative names for the specified Common Name. Note that if this field is used, then
SAN has to be in the form email:
email_address
, URI:
uri
, IP:ip_
address
, dns:
dns_name
,
or rid:
id
.
This field is optional.
Private Key
Password
Specify and verify password.
This field is required.
Verify Private
Key Password
Key Length Select length for the generated private key: 512, 1024 , or 2048. The default is 2048.
Digest
Algorithm
Select message digest algorithm to use: SHA-1, MD5, and MD2.
Submit/Cancel On submit, Policy Manager generates a popup containing the certificate signing request
for copying/pasting into the web form that you typically use to get the certificate signed
by a CA.
l To create a file containing the certificate signing request, click Download CSR File.
A .csr file is downloaded to your local computer.
l To download the generated private key file, click Download Private Key File.
NOTE: Make sure that you save the downloaded private key in a secure place.
Export Server Certificate
Navigate to Administration > Certificates > Server Certificates, and select the Export Server Certificate link. This link
provides a form that enables you to save the file ServerCertifcate.zip. The zip file has the server certificate (.crt file) and the
private key (.pvk file).
Import Server Certificate
Navigate to Administration > Certificates > Server Certificates, and select the Import Server Certificate link.