Common Name field
|
The fully
qualified name of the
Cisco IMC.
By default
the CN of the servers appears in CXXX-YYYYYY format, where XXX is the model
number and YYYYYY is the serial number of the server.
When you
upgrade to latest version, CN is retained as is.
|
Subject Alternate Name (SAN)
|
You can now provide additional input parameter for Subject Alternate Name. This allows various values to be associated using
the subject field of the certificate.
The various options of SAN includes:
Note
|
This field is optional. You can configure any number of SAN instances of each type, but all together the instances count
must not exceed 10.
|
|
Organization Name field
|
The organization requesting the certificate.
|
Organization Unit field
|
The
organizational unit.
|
Locality field
|
The city or town in which the company requesting the certificate
is headquartered.
|
State Name field
|
The state or province in which the company requesting the
certificate is headquartered.
|
Country Code drop-down list
|
The country in which the company resides.
|
Email field
|
The email
contact at the company.
|
Signature Algorithm
|
Allows you to select the signature algorithm for generating certificate signing request. This can be one of the following:
-
SHA1
-
SHA256
-
SHA384
-
SHA512
The default signature algorithm selected for generating certificate signing request is SHA384.
|
Challenge Password check box
|
A Challenge Password is to be embedded in the Certificate Signing Request (CSR) dialog box, which the issuer Certificate Authority (CA) uses to
authenticate the certificate.
If Challenge Password option is selected, then Challenge Password String will be populated for the user to enter the valid password string.
Note
|
The user has an option not to select the Challenge Password in which case the Challenge Password String is not populated. However, the user can proceed with generating the CSR successfully.
|
|
Challenge Password String field
|
This option is displayed only when Challenge Password String is selected. Enter a string.
|
String Mask drop-down list
|
This sets a mask for permitted string types in Certificate Signing Request (CSR) dialog box. This option masks out the use
of certain string types in certain fields. The string types are as follows:
-
Default: Uses PrintableString, T61String, BMPString.
-
pkix: Uses PrintableString, BMPString.
-
utf8only: Uses only UTF8Strings.
-
nombstr: Uses PrintableString, T61String (no BMPStrings or UTF8Strings).
|
Self Signed Certificate check box
|
Generates a Self Signed Certificate.
Warning
|
After successful certificate generation, the Cisco IMC Web GUI restarts. Communication with the management controller may
be lost momentarily and you will need to re-login.
|
Note
|
If enabled, CSR is generated, signed and uploaded automatically.
|
|
Generate CSR button
|
Click to generate the certificate.
|
Reset Values button
|
Reset all values in the dialog box.
|