Choose the Enrollment Method, Sentinel uses

RFIPSC Quick Start Guide

Choose the Enrollment Method

6.A certification request can be created as part of the installation process. You can either enroll online, in other words create and send the request immediately, or save the request in a file and deliver it later to the certification authority (CA). If there is no certification authority available or you for some reason want to postpone the creation of the request, create a self-signed certificate. It should be noted that once you’ve installed the software, you can create as many certification requests as you wish with the SSH Sentinel user interface but you cannot create a self-signed certificate with it.

Figure 8. Choosing a Certificate Enrollment Protocol.

7.Choose a Certificate EnrollmentProtocol:

A- To create a self-signedcertificate, select the option CA is unavailable. SSH

Sentinel uses...

(option A in Figure 8 above). The keys created in the previous step are used when the system creates the certificate.

B- To issue an online certification request, select the option Request certificate online. Generate an online... (option B in Figure 8 above). The installation wizard shows you a dialog where further information on the certification authority and the enrollment protocol is asked for. Refer to the section entitled Online Enrollment for reference.

C- Offline - To create a certification request and save it in a file for later processing , select the option Request certificate off-line. Generate a ... (option C in Figure 8 above). Refer to the section on Off-line Certification Request for the next step.