Creating a custom self-signed Web Server certificate request

Prev Next

You must generate a certificate request and submit it to a certificate authority before uploading a custom self-signed certificate to the NDR.

To create a custom self-signed Web server certificate request:

  1. Log in to the NDR as npadmin using the NDR IP address or FQDN. For example:

    $ ssh npadmin@10.1.0.1

    or

    $ ssh npadmin@exampleFQDN

  2. Enter privileged mode:

    npadmin@ia> enable

  3. Enter the npadmin password. The password can be 5 to 24 characters long.

    [sudo] password for npadmin: <password>

  4. Enter configuration mode:

    npadmin@ia# configure system

  5. Enter the Web server certificate configuration menu.

    npadmin@ia(config)# certificates

  6. Enter 1. The custom certificate configuration menu appears.

  7. Enter 1 to open the certificate signing request (CSR) settings. You see a menu similar to the following:

    Country Name (2 letter code) []:

    State or Province Name (full name) []:

    Locality Name (eg, city) []:

    Organization Name (eg, company) []:

    Organizational Unit Name (eg, section) []:

    Common Name (eg, fully qualified host name) []:

    Email Address []: Key Size []:

  8. Enter the information required of each setting. However, if Key Size [] is left empty, the generated private key size defaults to 2048, which meets the security requirements defined by the National Institute of Standards and Technology (NIST).

  9. Enter Y to confirm the CSR settings are correct. A PEM-encoded request is generated by the system.

  10. Copy and paste the PEM-encoded request into a text file and submit the request to a certificate authority.