28-41
Cisco Router and Security Device Manager Version 2.2 User’s Guide
OL-4015-08
Chapter28 Public Key Infrastructu re
RSA Keys

State (st)

Enter the state or province in which the router or the organization is located.

Country (c)

Enter the country in which the router or the organization is located.

Email (e)

Enter the email address to be included in the router certificate.
Note If the Cisco IOS image running on the router does not support this attribute, this
field is disabled.
RSA Keys
You must include an RSA public key in the enrollment request. Once the
certificate has been granted, the public key will be included in the certificate so
that peers can use it to encrypt data sent to the router. The private key is kept on
the router and used to decrypt the data sent by peers, and also used to digitally
sign transactions when negotiating with peers.

Generate new key pair(s)

Click this button if you want to generate a new key to use in the certificate. When
you generate a key pair, you must specify the modulus to determine the size of the
key. This new key appears in the RSA Keys window when the wizard is
completed.
Modulus
Enter the key modulus value. If you want a modulus value between 512 and 1024
enter an integer value that is a multiple of 64. If you want a value higher than
1024, you can enter 1536 or 2048. If you enter a value great er than 512, key
generation may take a minute or longer.