Use the create key command to create your key and
the create sign command to create a signing request to be
authenticated.
Create a key:
Type the create key command at the prompt:
Intel 7110> create key
Key strength (512/1024) [512]:
New keyID [001]: 002
Keypair was created for keyID: 002
Create a Certificate Signing Request:
Intel 7110> create sign 002
You will now be asked to enter information that will be
incorporated into your certificate request. The "common name"
must be unique. For other fields, you could use default values.
Country code: This is the two-letter ISO
abbreviation for your country (for example, GB for the United
Kingdom).
State or Province: This is the name of the
state or province where your organization's head office is
located. Please enter the full name of the state or province.
Locality: This is the name of the city where
your organization's head office is located.
Organization: This should be the organization
that owns the domain name. Use the legal name under which your
organization is registered. Do not use any of the following
characters: < > ~ ! @ # $ % ^ * / \ ( ) ?.
Organizational unit: This is normally the name
of the department or group that will use the certificate.
Common name: The common name is the "fully
qualified domain name," (or FQDN) used for DNS lookups of your
server (for example, www.mydomain.com). Browsers use this
information to identify your Web site. Some browsers will refuse
to establish a secure connection with your site if the server
name does not match the common name in the certificate. Please
do not include the protocol specifier "http://" or any port
numbers or pathnames in the common name. Do not use wildcard
characters such as * or ?, and do not use an IP address.
E-mail address: This should be the e-mail
address of the administrator responsible for the certificate.
Export the Certificate Signing Request (CSR).
In this example, xmodem is used to send the
CSR to a PC connected to the console port.
Intel 7110> export sign webserver
Export protocol: xmodem, uuencode
[ascii]:<Enter>
Use Ctrl-x to kill transmission
Beginning export...
Export successful!
Intel 7110>
To submit the CSR paste it into the field
provided in the online request form. Remember to include the
"-----BEGIN CERTIFICATE REQUEST-----" and "-----END CERTIFICATE
REQUEST-----" lines. The CSR will look something like this:
-----BEGIN CERTIFICATE REQUEST-----
MIIBnDCCAQUACQAwXjELMAkGA1UEBhMCQ0ExEDOABgNVBAgT
B09udGFayW8xEDAOBgNVBAcTB01vbnRyYWwxDDAKBgNVBAoT
………..more text…………
6ytkuJ9YnK84Q8x+pS2bEBDnw0D2MwdOSF1sBb1bcFfkmbpj
N2N+hqrrvA0mcNpAgk8nU=
-----END CERTIFICATE REQUEST-----
|