Create a TC10 or TC8 Certificate Signing Request
If you deploy a PKI in your environment, create a CSR to make sure your G7500 and Studio X series 
system or device is trusted by its network peers.
Only one CSR can exist on your device at a time. After you generate a CSR, get it signed and install 
it on your device before generating another. If you generate a second CSR before you install the first 
one, the device discards the previous CSR.
1. In the system web interface, go to Security > Certificates.
2. Choose from:
● Select Poly TC8 > Create and Download CSR.
● Select Poly TC10 > Create and Download CSR.
3. In the Certificate Details form, complete the following fields:
Table 7-2
CSR Settings
CSR Information Description
Hash Algorithm Specifies the hash algorithm for the CSR: SHA-256 (recommended) or SHA-1 
(not recommended).
Common Name (CN) Specifies the system name. This is a required field. Maximum characters: 64 
(truncated if necessary).
Poly recommends the following guidelines for this field:
● For systems registered in DNS, use the system’s FQDN.
● For systems not registered in DNS, use the system’s IP address.
Organizational Unit (OU)
Specifies the unit of business defined by your organization. Default is blank. 
Maximum characters: 64.
NOTE:  The system supports only one OU field. If you want the signed 
certificate to include more than one OU field, you must download and edit the 
CSR manually.
Organization (O)
Specifies your organization’s name. Default is blank. Maximum characters: 64.
City or Locality (L) Specifies the city where your organization is located. Default is blank. 
Maximum characters: 128.
State or Province (ST) Specifies the state or province where your organization is located. Default is 
blank. Maximum characters: 128.
Country (C) Displays the country selected in the setup wizard. You can’t change this 
setting here.
SAN: FQDN Specifies the FQDN assigned to the system. This is the same as the Common 
Name (CN), but it isn’t truncated. Default is blank. Maximum characters: 253.
SAN: Additional Name Specifies an additional name. Default is blank. Maximum characters: 253.
SAN: IPv4 Address Default is the IPv4 address of the system. Maximum characters: 15.
User Principal Name (UPN) Specifies the user and domain name to log in to a Windows domain (for 
example, UserName@YourDomain.com). This is the userPrincipalName 
attribute of the account object in Active Directory.
Relate this setting to the 802.1X identity and password you specified on the 
Network > LAN Options page. Default is blank.
Create a TC10 or TC8 Certificate Signing Request 61