Generate private keys and signing certificates for client protection

If you do not already have a private key and signing certificate for the engine, you can generate a private key and signing certificate.

When you generate a private key and signing certificate in the Secure SD-WAN Manager, you must export the certificate. You must also add it to the list of certificate authorities that are trusted by users’ web browsers.

For more details about the product and how to configure features, click Help or press F1.

Steps

  1. Select Configuration, then browse to Administration.
  2. Select Certificates > Certificate Authorities > Client Protection Certificate Authorities.
  3. Open the Client Protection Certificate Authority Properties dialog box in one of the following ways:
    • Right-click Client Protection Certificate Authorities, then select New Client Protection Certificate Authority.
    • Right-click a Client Protection Certificate Authority element, then select Properties.
  4. Click the Certificate tab.
  5. Click Generate.
  6. In the Common Name field, enter the certificate authority’s common name.
  7. From the Public Key Length drop-down list, select the length of the public key to be generated.
  8. In the Valid Until field, enter the date and time until which the signing certificate is valid.
    Tip: You can also select the date by clicking Open Calendar.
    By default, the signing certificate is valid for one year after the creations date and time.
  9. Click OK.
    A private key and signing certificate are generated.

Client Protection Certificate Authority Properties dialog box

Use this dialog box to configure the certificate authority (CA) for client protection.

Option Definition
General tab
Name The name of the element.
Subject Name The identifier of the certified entity.
Issuer The issuer of the certificate.
Public Key Algorithm The public key algorithm that was used to sign the certificate.
Key Length The length of the key in bits.
Serial Number The sequence number of the certificate. The number is issued by the CA.
Signature Algorithm The signature algorithm that was used to sign the certificate.
Signed by The CA that signed the certificate.
SubjectAltName The alternative subject name of the certified entity.
Valid From Shows the start date of certificate validity.
Valid To Shows the end date of certificate validity.
Fingerprint (SHA-1) Shows the certificate fingerprint using the SHA-1 algorithm.
Fingerprint (SHA-256) Shows the certificate fingerprint using the SHA-256 algorithm.
Fingerprint (SHA-512) Shows the certificate fingerprint using the SHA-512 algorithm.
Validity time Specifies the length of time that the certificate is valid.
Option Definition
Certificate tab
Generate Opens the Signing Certificate Details dialog box.
Import (Private Key) Opens a file browser to import a private key file.
Import (Certificate) Opens a file browser to import a certificate file.
Export Exports the certificate.