Connectivity Guide

5. In the Identity area, enter values in the Country, State, Locality, Organization, and Organizational Unit fields
that correspond to your organization. These values form part of the distinguished name for the certificate.
6. Enter a descriptive name for the certificate in the Common Name field. This value is used to identify the certificate
as the issuer of other certificates, notably the signing certificate.
7. For a root certificate, the Signing Common Name field is included on the form. Enter a descriptive name for the
signing certificate in the Signing Common Name field. This value is used to identify the signing certificate as the
issuer of client and server certificates from this certificate authority. The other identity information in the signing
certificate will be the same as for the root certificate.
8. Enter a contact email address in the Email Address field. This email address is included in the root and signing
certificates, and provides a way for users of the certificate authority to contact your organization.
9. In the Private Key area, use the Key Type drop-down list to specify the type of private key that should be created
for the certificate:
l 1024-bit RSA – not recommended for a root certificate
l 2048-bit RSA – recommended for general use
l 4096-bit RSA – higher security
10. In the Self-Signed Certificate area, for a root certificate the CA Expiration field is included in the form. Use this
field to specify the lifetime of the root certificate in days. The default value is 365 days.
11. Use the Digest Algorithm drop-down list to specify which hash algorithm should be used. Note: MD5 is not
recommended for use with root certificates.
Dell Networking W-ClearPass Guest 6.2 | User Guide Onboard + WorkSpace | 85