Version 6.6 337 October 2014
Installation & Operation Manual 33. Configuring Security Settings
33.10.7 Generating a New Private Key
Some users may wish to periodically re-generate the Private Key file to enhance
security. When a new Private Key is generated, an accompanying Self-Signed
Certificate is generated as well. This Self-Signed Certificate contains a matching
Public Key. However, if you are implementing PKI infrastructure, you should generate
a new CSR request, submit it to the Certificate Authority (CA) and receive from it a
properly signed X.509 Certificate which matches the new Private Key.
To generate a new Private Key:
1. Click
to access the Media Gateway status screen.
2. In the Navigation pane, select Security and then in the configuration pane, click
Security Settings; the Security Settings screen is displayed.
3. Click the Maintenance Actions
in the top-right corner and select the
Generate X.509 Files option. The Generate X.509 Files dialog is displayed.
4. Select Private Key.
5. In the Private Key field, enter a name of the new Private Key file.
6. In the Self-Signed Certificate field, enter a name of the new Self-Signed
Certificate file.
7. Click OK. A new private key and self-signed certificate file are generated and
automatically added to the Auxiliary Files repository.
8. If you use PKI infrastructure, you must issue a new CSR to the CA to receive a
new signed X.509 Certificate that matches the new private key. For more
information, see Section .'Generating a Certificate Signing Request (CSR)' on
page 329.
9. To activate the new private key and certificate (self-signed or received from the
CA), you must configure them in the Media Gateway Security Settings tab and
apply the new configuration to the Media Gateway boards. For more information,
see Section 'Activating the new X.509 Certificates on the Media Gateway' on
page 331.
To Next Page
Loading...
