Create CSR and Self-Signed Certificate window

System Administrator Guide for VSP 5000 Series
Version
90-09-2x
Audience
anonymous
Part Number
MK-98RD9009-16

Item Description
CSR Settings
Country Name Enter the country name in 2 half-width alphabetic letters. (Example: US)
State or Province Name Enter the state or province name. (Example: California)
Locality Name Enter the city or region name. (Example: San Jose)
Organization Name Enter the organization name. (Example: Hitachi)
Organization Unit Name Enter the organization unit name. (Example: ITPro)
Common Name Enter the IP address or the host name.
E-mail Address (Optional) Enter your email address.
Optional Company Name (Optional) Enter an additional organization name.
Private Key settings
Key Type Select RSA or ECDSA from the pull-down menu.
Key Length Select the key length from the pull-down menu.
The key lengths that you can select depend on the key type:
  • RSA: 2048 bits, 3072 bits, 4096 bits
  • ECDSA: 256 bits (secp256r1), 384 bits (secp384r1), 521 bits (secp521r1)
Password Enter the password of the private key. No entry is required if you set no password
Re-entry Password If you set a password, you must enter it. Re-enter the password that you set in Password.
Create CSR File and Key File Open File Chooser, and then proceed to Download dialog box . The button is not activated unless you enter or select all required items for CSR settings and private key settings.
Create Self-Signed Certificate To create a self-signed certificate, select the check box. The default is off.
Profile (.cfg file) Default By default, the system will automatically apply the default settings, and then no file selection is required.
Custom Select the profile reference location. Click Browse or Select File to select the profile you want to browse. The name of the button to click depends on the browser. For more information about the Profile (.cfg file) settings, see the table in the following section.
Create Self-Signed Certificate File Create a self-signed certificate file. The button is not activated unless you enter or select all of the following required fields:
  • CSR settings
  • Private key settings
  • Profile (Select Default or Custom. For Custom, select a file.)
Close Close the file setting window.

Profile (.cfg file)

Profile (.cfg file) is a file that defines the parameters to be set with the self-signed certificate. The following describes the profile formats, settings, and parameters to be defined.
  • File format
    • Format: Text
    • Extension: .cfg
    • Character code: ISO-8859-1
    • Line terminator: CRLF
  • File settings
    • Parameter 1 = Parameter 1 setting value
    • Parameter 2 = Parameter 2 setting value

Examples of profile (.cfg) descriptions

days=3650

hashAlgorithm=SHA384 (available for SVP with firmware version 90-08-02/09 or earlier)

Parameters to be defined by profile

Item Description
days Specifies the number of days that the certificate is valid from the time of self-signed certificate creation. An integer value from 1 to 3650 can be specified. It is recommended that the effective period be less than 825 days (27 months). If this parameter is not specified, 365 is set.
hashAlgorithm Specifies the hash algorithm to be used with the self-signed certificate. SHA256 or SHA384 can be specified. If SHA256 is specified, SHA-256 is set as the hash algorithm for the self-signed certificate. If SHA384 is specified, SHA-384 is set as the hash algorithm for the self-signed certificate. If this parameter is not specified, SHA-256 is set as the hash algorithm for the self-signed certificate.