SonicWALL VPN Page 219
Creating a Certificate Signing Request
To create a certificate for use wit h a VP N SA , follow these steps:
Tip! You should crea te a Certificate Policy to used in conjuncti on with local certifica tes. A Certificate
Policy determines the authentication requirements and the authority limits required for the
validation of a certi fi ca te.
1. Click VPN, then Local Cert ificates.
2. In the Generate Certificate Signing Request section, enter a name for the certificate in the
Certificate Name field. Using the drop down menus, enter information for the certificate
request. As you enter information in the Request fields, the Disti nguished Name (DN ) is created.
You may also attach an optional Subject Alterna tiv e Name to the certificate such as the Domain
Name or E-mail Address.
3. The Subject Key type is preset as an RSA algorithm. RSA is a public key cryptographic algorithm
used for encrypt ing data.
4. Select a Subject Key size from the from the Subject Key Size menu.
5. Not all key sizes are supported by a Certificate Authority, therefore you should check with your
Certificate Authority for supported key si zes.
6. Click Generate to create a certificate file .
7. Once the Certifica te Signing Request is generated, a message describing the re sult is displayed.
8. Click Export to download the file to your computer, and then click Save to save it to a directory
on your computer.
9. Now that you have generated the Certificate Request , you can send it to your CA service for
validation.

Importing a Signed Local Certificate

When the CA service returns the signed certificate request generated locally, import it into the
SonicWALL using the following step s:
1. In the Current Certificates section of Local Certificates, select the corresponding request from
the Certificates m enu.
2. Click Browse, and select th e *.der from the Choose File dialogue box.
3. Click Import Certificate.
4. The certifica te is now updated to Verified , and you c an now use it for a VPN SA usin g a thir d pa rty
certificate.