Certificate Request
If you configure the certificate authentication in User Management, you need to add the certificate information in Certificate Management, as shown in the following figure.
Extend Identification Information: Content optional.
Password Settings: Select a password standard, support the international commercial key standard, RSA's key length such as 512, 1024, 2048, and 4096, and the commercial encryption digest algorithms such as SHA1 and SHA2.
After parameters are configured and submitted, a certificate application and key files will be generated. Click Download to download the application file, which is a CSR file.
Certificate List
In the certificate list, the certificates to be used are imported, including the local certificate and root certificate, shown as follows:
Name: Fill in the name.
Certificate Type: Select the local certificate or root certificate type, as shown in the following figure.
Select CER Server Certificate:
Select Key: Come from the list of certificates applied.
CA Root certificate: Import the applied CA root certificate.
Local Certificate: Import the generated certificate.
Select CRE Root Certificate:
Certificate Name: Fill in the name.
CA Root Certificate: Import the following roots generally:
• The root is used for the local certificate.
• If the root issued by the certificate of the opposite endpoint is not the same as the local endpoint’s local certificate, the root of the opposite endpoint also needs to be imported.
Select PKCS # 12 Certificate to import:
Certificate Name: Fill in the name.
CA Root Certificate: The CA root certificate is used by the local certificate.
Local Certificate: Import a certificate in P12 format.
Protection Password: It is the password at the time of certificate generation in P12 format.
Select PKCS #7 Certificate to import:
Name: Fill in the name.
Select Key: Come from the application information list. Namely, select the application information corresponding to the certificate to be imported.
The imported root certificate or local certificate can be downloaded.