Chapter 43 Object
ZyWALL USG Series User’s Guide
885
If you configured the
My Certificate Create
screen to have the Zyxel Device enroll a certificate and the
certificate enrollment is not successful, you see a screen with a
Return
button that takes you back to the
My Certificate Create
screen. Click
Return
and check your information in the
My Certificate Create
screen. Make sure that the certification authority information is correct and that your Internet
connection is working properly if you want the Zyxel Device to enroll a certificate online.
43.12.3.2 The My Certificates Edit Screen
Click
Configuration > Object > Certificate > My Certificates
and then the
Edit
icon
to open the
My
Certificate Edit
screen. You can use this screen to view in-depth certificate information and change the
certificate’s name.
Town (City)
Identify the town or city where the certificate owner is located. You can use up to 31
characters. You can use alphanumeric characters, the hyphen and the underscore.
State, (Province)
Identify the state or province where the certificate owner is located. You can use up to 31
characters. You can use alphanumeric characters, the hyphen and the underscore.
Country
Identify the nation where the certificate owner is located. You can use up to 31
characters. You can use alphanumeric characters, the hyphen and the underscore.
Key Type
Select
RSA
to use the Rivest, Shamir and Adleman public-key algorithm.
Select
DSA
to use the Digital Signature Algorithm public-key algorithm.
Key Length
Select a number from the drop-down list box to determine how many bits the key should
use (512 to 2048). The longer the key, the more secure it is. A longer key also uses more PKI
storage space.
Extended Key Usage
This field displays how the Zyxel Device generates and stores a request for server
authentication, client authentication, and/or IKE Intermediate authentication certificate.
Server
Authentication
Select this to have Zyxel Device generate and store a request for server authentication
certificate.
Client
Authentication
Select this to have Zyxel Device generate and store a request for client authentication
certificate.
IKE Intermediate
Select this to have Zyxel Device generate and store a request for IKE Intermediate
authentication certificate.
Create a self-signed
certificate
Select this to have the Zyxel Device generate the certificate and act as the Certification
Authority (CA) itself. This way you do not need to apply to a certification authority for
certificates.
Create a certification
request and save it
locally for later
manual enrollment
Select this to have the Zyxel Device generate and store a request for a certificate. Use the
My Certificate Details
screen to view the certification request and copy it to send to the
certification authority.
Copy the certification request from the
My Certificate Details
screen (see
) and then send it to the certification authority.
OK
Click
OK
to begin certificate or certification request generation.
Cancel
Click
Cancel
to quit and return to the
My Certificates
screen.
Table 348 Configuration > Object > Certificate > My Certificates > Add (continued)
LABEL
DESCRIPTION
Summary of Contents for USG110
Page 27: ...27 PART I User s Guide ...
Page 195: ...195 PART II Technical Reference ...
Page 309: ...Chapter 10 Interfaces ZyWALL USG Series User s Guide 309 ...
Page 313: ...Chapter 10 Interfaces ZyWALL USG Series User s Guide 313 ...
Page 358: ...Chapter 10 Interfaces ZyWALL USG Series User s Guide 358 ...
Page 373: ...Chapter 10 Interfaces ZyWALL USG Series User s Guide 373 ...
