Generating a Certificate Signing Request

1. Select the Launch Manager button from the SSH RSA Key section.

   The Certificate Management screen displays, with the Manage Certificates tab selected by default. This screen displays all existing trustpoints.

2. Click the Create CSR tab.

   The Create CSR screen displays.

   

   Create CSR Window

   
3. Set the following Create New Certificate Signing Request (CSR) configuration parameters:

   Create New	Select this option to create a new RSA Key. Provide a 32 character name to identify the RSA key. Use the spinner control to set the size of the key (from 2,048 or 4,096 bits). It is recommended leaving this value at the default setting (2048) to ensure optimum functionality. For more information on creating a new RSA key, see RSA Key Management.
   Use Existing	Select this option to use an existing RSA key. Use the drop-down menu to select the existing key used by both the device and the server (or repository) of the target RSA key.

4. Set the following Certificate Subject Name parameters required for the creation of the certificate:

   Certificate Subject Name	Select either the auto-generate radio button to automatically create the certificate's subject credentials or select user-configured to manually enter the credentials of the self signed certificate. The default setting is autogenerate.
   Country (C)	Define the Country used in the CSR. The field can be modified by the user. This is a required field and must not exceed 2 characters.
   State (ST)	Enter a State for the state or province name used in the CSR. This is a required field.
   City (L)	Enter a City to represent the city name used in the CSR. This is a required field.
   Organization (O)	Define an Organization for the organization used in the CSR. This is a required field.
   Organizational Unit (OU)	Enter an Organizational Unit for the name of the organization unit used in the CSR. This is a required field.
   Common Name (CN)	If there is a Common Name (IP address) for the organizational unit issuing the certificate, enter it here.

5. Select the following Additional Credentials required for the generation of the CSR:

   Email Address	Provide an E-mail address used as the contact address for issues relating to this CSR.
   Domain Name	Enter a FQDN as an unambiguous domain name that specifies the node's position in the DNS tree hierarchy. To distinguish an FQDN from a regular domain name, a trailing period is added. For example, somehost.example.com. An FQDN differs from a regular domain name by its absoluteness, since a suffix is not added.
   IP Address	Specify the IP address used as the destination for certificate requests.

6. Select the Generate CSR button at the bottom of the Create CSR screen to generate the CSR.