Page 190 Manual
ResistTel IP2 / IP152
ExResistTel IP2 / IP154
Create new: Click this link to create a new self-
certificate request (see below).
Upload:
Select a local certificate file and press the "Upload" button. You
c
an upload a single certificate corresponding to the private key
of a previously created certificate request in PEM, DER
PKCS#12
format. Instead of that you can upload a complete
certificate chain containing the corresponding private key as a
PEM or PKCS#12 encoded text file, too.
password encrypted certificates (PKCS#12 files only) you have
to enter the password before clicking the upload button.
Creating a self-signed-certificate
Click the "Create new" link.
Type: Select "Self-signed certificate".
Key: Choose the bit strength of the key pair. Available bit-
strengths are 1024, 2048 and 4096-
reuse the current key pair.
Validity: Select the Validity time in years.
Other naming
options:
There are some other optional naming parameters (
Name,
Organisational Unit, Organization, Locality, State or
Province, Country
, up to three DNS Names, up to two IP
Addresses
). You can use them to describe the role of the
device within your installation, for example.
Signing request
A certificate signing request contains a public key and an identity. While the
corresponding private key is kept secret, the request is being sent to a CA. It will
issue an appropriate certificate for the public key after it verified the identity.
Details: Click the name of the signing request to view its details.
Download: Download the signing request by clicking the PEM- or DER-
link, respectively.
Remove: Discard the current signing request and the corresponding
private key. As an implication certificates for that key cannot
be installed, any more.
Creating a certificate signing request
Click the "Create new" link at the device certificate section.