TMS zl Management and Configuration Guide ST.1.2.100916

7-90
Virtual Private Networks
Configure an IPsec Site-to-Site VPN with IKE
c. For Key Algorithm, select RSA or DSA.
When you configured the IKEv1 policy, you selected DSA Signature or
RSA Signature for Authentication Method (see step 11b on page 7-83).
Match this setting.
d. For Key Size, select 512, 1024, or 2048, which determines the length of
the key in bits.
e. Click Apply.
The private key is displayed in the VPN > Certificates > IPsec Certifi-
cates window.
Figure 7-66. VPN > Certificates > IPsec Certificates Window (Private Key Added)
f. Go to step 6.
5. Import a private key that was generated elsewhere:
a. Transfer the private key to your management workstation.
Make sure that all copies of the private key are stored in secure
locations. Otherwise, the certificate could be compromised.
b. Click Import Private Key.