Procedure for creating a CSR (Certificate Signing Request)

Summary

This article explains the per-requisites for placing the request for CA to obtain the signed SSL certificate.

Question

How to create a CSR (Certificate Signing Request) with key length of 2048 bit ?

Customer Environment

Ruckus ZD controller with inherent non-3rd party official CA certificate.

Root Cause

Ruckus certificates are not official CA, and thus WebUI access will throw SSL warning, prevented by installing official 3rd party CA certificate.

Resolution

Here is the procedure to create a CSR:

1. Check if the official CA will use 1K or 2K (1024/2048 bit key length) certificates.

2. Most of the vendors use 2K(2048) so configure ZD tool to create a new 2K(2048) private key. To generate a private key with a key length of 2048 bit, follow the below procedure.

ZD running on old version: Go to Configure >> Certificate >> Advanced options
ZD running on latest versions: Go to Administer >> Certificate >> Advanced options.

3. Fill in the form and ensure the Name and Domain used is valid as this will be the FQDN (fully qualified domain name) used for all ZD page requests and must resolve on a local or remote DNS. Otherwise, specify SAN (Subject Alternative Name) with IP address.

4. Now go ahead and Submit (and pay) for CA signed cert - usually by copying and pasting the CSR into a web site.

Article Number:
000001586

Updated:
August 17, 2020 06:12 AM (over 3 years ago)

Tags:
Configuration, ZoneDirector

Votes:
0

This article is:
helpful
not helpful