TMS zl Management and Configuration Guide ST.1.1.100430

7-38
Virtual Private Networks
Configure an IPsec Client-to-Site VPN
3. Add a private key. You have two options:
• Generate the private key on the TMS zl Module. See step 4.
• Import a private key generated elsewhere. See step 5.
4. Generate the private key on the TMS zl Module
a. In the Private Keys section, click Generate Private Key.
Figure 7-16. Generate Private Key Window
b. For Private Key Identifier, type a descriptive string between 1 and 31
alphanumeric characters. The string must be unique to this key.
c. For Key Algorithm, select RSA or DSA.
When you configured the IKEv1 policy, you selected DSA Signature or
RSA Signature for Authentication Method (see step 11b on page 7-34).
Match this setting.
d. For Key Size, select 512, 1024, or 2048, which determines the length of
the key in bits.
e. Click Apply.
The private key is displayed in the VPN > Certificates > IPsec Certifi-
cates window.