Black Box ET1000A, ET0010A Managing Installed Certificates, Certificate request preference fields

Working with Certificates for the ETEPs

The Common Name (CN) defaults to the appliance name; it cannot be set as a preference. For information about other distinguished name fields, see Table 68. Other certificate requests preferences are described in Table 78.

Table 78 Certificate request preference fields

Setting	Description
Key Length	The key is generated using the RSA algorithm. The RSA key size
	typically refers to the size of the modulus. A larger modulus is more
	secure, but the algorithm operations are slower.
	• 512: Offers little security. Use only for very short-term security
	needs.
	• 768: Suitable for less valuable information.
	• 1024: Recommended for most corporate use.
	• 2048: Provides the highest level of security.
Communication timeout	The timeout for generating a certificate signing request. The timeout is
	specified in seconds. Valid values range from 30 - 300 (5 minutes).
	The larger the key size, the longer it takes to generate a certificate
	request.

NOTE

The larger the key size, the longer it takes the EncrypTight appliance to generate the certificate request due to the complexity of the algorithm’s operations. A certificate request with a key size of 2048 bits can take several minutes to generate.

Figure 101 Commonly used values can be set as certificate request preferences

Managing Installed Certificates

After certificates are installed on an appliance, you can view them, export them, and delete them. See the following topics to learn more:

●“Viewing a Certificate” on page 286

●“Exporting a Certificate” on page 286

EncrypTight User Guide 285