Deployment Guide

134 | Onboard + WorkSpace Dell Networking W-ClearPass Guest 6.3 | User Guide
The Key Type drop-down list specifies the type of private key that should be created for the certificate. You can select
one of these options:
l 1024-bit RSA – lower security
l 2048-bit RSA – recommended for general use
l 4096-bit RSA – higher security
Using a private key containing more bits will increase security, but will also increase the processing time required to
create the certificate and authenticate the device. The additional processing required will also affect the battery life of a
mobile device. It is recommended to use the smallest private key size that is feasible for your organization.
If you have selected TLS Client as the certificate type, the Subject Alternative Name section is also shown. The
alternative name can be used to specify additional identification details for the certificate’s subject. If one or more of
these options are provided, the issued certificate will contain a subject AltName extension with the specified values.
Table 26 explains the fields that may be included as part of the subject alternative name.
Name Description
Device Type Type of device, such as “iOS”, “Android”, etc.
Device UDID
Unique device identifier (UDID) for this device. This is typically a 64-bit, 128-
bit or 160-bit number represented in hexadecimal (16, 32 or 40 characters,
respectively).
Device IMEI
International Mobile Equipment Identity (IMEI) number allocated to this
device.
Device ICCID
Integrated Circuit Card Identifier (ICCID) number from the Subscriber Identity
Module (SIM) card present in the device.
Device Serial Serial number of the device.
MAC Address IEEE MAC address of this device.
Product Name
Product string identifying the device and often including the hardware version
Table 26: Subject Alternative Name Fields Supported When Creating a TLS Client Certificate Signing
Request