Deployment Guide

l X9.62/SECG curve over a 256-bit prime field
l NIST/SECG curve over a 384-bit prime field
10. In the Self-Signed Certificate area, for a root certificate the CA Expiration field is included in the form. Use this
field to specify the lifetime of the root certificate in days. The default value is 365 days.
11. Use the Digest Algorithm drop-down list to specify which hash algorithm should be used to sign the digital
certificate request. Optionsinclude:
l SHA-1
l SHA-224
l SHA-256
l SHA-384
l SHA-512
12. Click Create Certificate Authority.
l If you selected root mode, the root certificate is included in the Certificate Authorities list.
l If you selected intermediate mode, the Intermediate Certificate Request page opens with text for the certificate
signing request (CSR). You can send the CSR to a certificate authority, who will generate a signed certificate
you can install. See "Requesting a Certificate for the Certificate Authority" on page 101.
l If you selected imported mode, the Certificate Authority Certificate Import form opens, where you can upload
the digital certificates and private key to the server. See"Installing a Certificate Authority’s Certificate " on page
101.
Editing Certificate Authority Settings
You can edit some properties of a certificate authority after you create it, and configure some attributes that were not
included on the setup form.
To edit a certificate authority, go to Onboard + WorkSpace >Initial Setup > Certificate Authorities, click the
certificate to expand its row, and click its Edit link. The Certificate Authority Settings form opens.
In the basic information area at the top of the form:
The Name and Description fields are used internally to identify this certificate authority for the network administrator.
These values are never displayed to the user during device provisioning.
Field Description
Name Short name that identifies the certificate clearly. Certificate authority names can include spaces.
Description Briefly describes the CA. This description is shown in the Certificate Authorities list.
Mode Either Root, Intermediate, or Imported. The certificate's mode cannot be edited after creation.
Table 19: Certificate Authority Settings, Basic Information
In the Certificate Issuing area:
Dell Networking W-ClearPass Guest 6.3 | User Guide Onboard + WorkSpace | 97