
Chapter 14 Certificates 271
Nortel Business Secure Router 222 Configuration — Basics
Create a
certification
request and save it
locally for later
manual enrollment
Select Create a certification request and save it locally for later
manual enrollment to have the Business Secure Router generate
and store a request for a certificate. Use the My Certificate Details
screen to view the certification request and copy it to send to the
certification authority.
Copy the certification request from the My Certificate Details
screen (see “My Certificate details” on page 272) and then send it to
the certification authority.
Create a
certification
request and enroll
for a certificate
immediately online
Select Create a certification request and enroll for a certificate
immediately online to have the Business Secure Router generate a
request for a certificate and apply to a certification authority for a
certificate.
You must have the certification authority’s certificate already
imported in the Trusted CAs screen.
When you select this option, you must select the certification
authority’s enrollment protocol and the certification authority’s
certificate from the drop-down list and enter the certification
authority’s server address (or URL). You also need to fill in the
Reference Number and Key if the certification authority requires it.
Enrollment
Protocol
Select the certification authority’s enrollment protocol from the
drop-down list.
Simple Certificate Enrollment Protocol (SCEP) is a TCP-based
enrollment protocol that was developed by VeriSign and Cisco.
Certificate Management Protocol (CMP) is a TCP-based
enrollment protocol that was developed by the Public Key
Infrastructure X.509 working group of the Internet Engineering Task
Force (IETF) and is specified in RFC 2510.
CA Server Address Enter the IP address (or URL) of the certification authority server.
CA Certificate Select the certification authority’s certificate from the CA Certificate
drop-down list.
You must have the certification authority’s certificate already
imported in the Trusted CAs screen. Click Trusted CAs to go to the
Trusted CAs screen where you can view (and manage) the
Business Secure Router's list of certificates of trusted certification
authorities.
Request
Authentication
When you select Create a certification request and enroll for a
certificate immediately online, the certification authority can
require you to include a reference number and key to identify you
when you send a certification request. Fill in both the Reference
Number and the Key fields if your certification authority uses CMP
enrollment protocol. Just fill in the Key field if your certification
authority uses the SCEP enrollment protocol.
Key Type the key that the certification authority gave you.
Table 68 My Certificate create
Label Description
Comentarios a estos manuales