Configuring an External Certificate
You configure external certificates under Administration > Security: External Certificate. The External Certificates page displays the certificate details.
These configuration options are available under External certificate configuration:
Enable the external certificate add the external certificate first before selecting this check box then click Apply.
The following options are available under Certificate:
Details:
Issued To/Issued By specifies these options:
• Common Name—Specifies the common name of the certificate authority.
• Email—Specifies the organization email.
• Organization—Specifies the organization name (for example, the company).
• Locality—Specifies the city.
• State—Specifies the state.
• Country—Specifies the country.
Validity specifies these options:
• Issued On—Specifies the date the certificate was issued.
• Expires On—Specifies the date the certificate expires.
Signature Algorithm specifies the signature algorithm.
Fingerprint specifies the SSL fingerprint.
Key specifies these options:
• Type—Specifies the key type. The default value is RSA.
• Size—Specifies the key size. The default value is 2048.
To view the certificate in PEM format, under Certificate, select the PEM tab. The certificate appears in PEM format.
Import imports the certificate and key. The page displays controls for browsing to and uploading the certificate and key files. You can also use the text box to copy and paste a PEM file. The private key is required regardless of whether you’re adding or updating the certificate.
Certificate specifies the action:
• Upload—Browse to the local file in PKCS-12, PEM, or DER formats.
• Paste it here (PEM)—Copy and then paste the contents of a PEM file.
To generate a CSR, under Certificate, select the Generate CSR tab and complete these configuration options:
Common Name (required) specifies the common name (hostname) of the peer.
Organization Name specifies the organization name (for example, the company).
Organization Unit Name specifies the organization unit name (for example, the section or department).
Locality specifies the city.
State specifies the state. Don’t abbreviate.
Country (2-letter code) specifies the country (2-letter code only).
Email Address specifies the email address of the contact person.
Generate CSR generates the Certificate Signing Request.