Chapter 15 Maintenance Screens

15.6.1 Modifying or Creating a Certificate

When you select the Edit a self-signed CA certificate option, then click the Edit button, a screen opens to allow you to make adjustments to the NSA’s public key certificate.

The screen is also the same for the Create a certificate authorized by other CA option.

Figure 185 Maintenance > SSL > Create or Edit a Certificate

The following table describes the labels in this screen.

Table 109 Maintenance > SSL > Create or Edit a Certificate

LABEL

DESCRIPTION

Common Name

This name describes the certificate’s origin, either in the form of

 

an IP address or a domain name.

 

 

Host IP Address

Select this option and enter the NSA’s IP address if you want to

 

use this for the common name.

 

 

Host Domain Name

Select this option and enter the NSA’s domain name if you want

 

to use this for the common name

 

 

Organizational Unit

Enter this name of the organizational unit which owns or

(Optional)

maintains the NSA. This is an optional field.

 

 

Organization

Enter this name of the organization or company which owns or

(Optional)

maintains the NSA. This is an optional field.

 

 

Country (Optional)

Enter this name of the country in which the NSA is located. This

 

is an optional field.

 

 

Key Type

Select the certificate’s key type, either RSA or DSA. RSA is a

 

public-key encryption and digital signature algorithm, while DSA

 

is only a digital signature algorithm.

 

 

Key Length

Select the encryption key length. The longer the key, the better

 

the encryption security. The only drawback to having a long key

 

is that the file encrypted with it swells in size as well.

 

 

 

335

NSA320 User’s Guide