Create a Self-signed Certificate

Before generating a certificate, make sure the time and date on the ExtremeCloud IQ clock are accurate. Otherwise, the certificate might be rejected during validation because the starting date has not occurred or the expiration date has passed.

Use this task to create a self-signed certificate.

  1. Enter a name.
  2. Enter the ExtremeCloud IQ organization name.
    Examples: Sophia University, Hilton Hotel, Extreme Networks.
  3. Enter the ExtremeCloud IQ division name.
    Examples: Marketing, Engineering, Sales.
  4. Enter ExtremeCloud IQ location.
  5. Enter ExtremeCloud IQ State or Province.
  6. Enter ExtremeCloud IQ two-character country code.
  7. Enter an optional contact email address.
  8. Enter the number of days the CA will be valid.
    A CA is typically valid for a much longer period than the server certificates it signs.
  9. Choose an optional key size for the key pair: 512, 1024, or 2048 bytes.
    The encryption produced by the smallest key size (512 bytes) can be cracked with relatively common tools and is not generally recommended. However, it might be needed if the devices on which the CA certificate must be loaded do not support larger key sizes. Keys of 1024 or 2048 bytes provide far stronger encryption, but require greater processing power.
  10. Select Save.
9038986-00 Rev AA