14 Administration
14-38 VPN 3000 Concentrator Series User Guide
Locality (L)
Enter the city or town where this VPN Concentrator is located; e.g., Franklin. Spaces are allowed.
State/Province (SP)
Enter the state or province where this VPN Concentrator is located; e.g., Massachusetts. Spell out
completely, do not abbreviate. Spaces are allowed.
Country (C)
Enter the country where this VPN Concentrator is located; e.g., US. Use two characters, no spaces, and
no periods. This two-character code must conform to ISO 3166 country abbreviations.
Subject Alternative Name (Fully Qualified Domain Name)
Enter the fully qualified domain name for this VPN Concentrator that identifies it in this PKI; e.g.,
vpn3030.altiga.com. This field is optional. The alternative name is an additional data field in the
certificate, and it provides interoperability with many Cisco IOS and PIX systems in LAN-to-LAN
connections.
Key Size
Click the drop-down menu button and select the algorithm for generating the public-key / private-key
pair, and the key size. If you are requesting an SSL certificate, you must select an RSA choice.
RSA 512 bits = Generate 512-bit keys using the RSA (Rivest, Shamir, Adelman) algorithm. This key
size provides sufficient security and is the default selection. It is the most common, and requires the
least processing.
RSA 768 bits = Generate 768-bit keys using the RSA algorithm. This key size provides normal
security. It requires approximately 2 to 4 times more processing than the 512-bi t key.
RSA 1024 bits = Generate 1024-bit keys using the RSA algorithm. This key size provides high
security, and it requires approximately 4 to 8 times more processing than the 512-bit key.
DSA 512 bits = Generate 512-bit keys using DSA (Digital Signature Algorithm) .
DSA 768 bits = Generate 768-bit keys using the DSA algorithm.
DSA 1024 bits = Generate 1024-bit keys using the DSA algorithm.
Apply / Cancel
To generate the certificate request, click Apply. The Manager displays the Administration | Certificate
Management | Enrollment | Request Generated screen, and then opens a browser window showing the
certificate request. See below.
To discard your entries and cancel the request, click Cancel. The Manager returns to the Administration |
Certificate Management screen.