AG 3100276 Quick Reference GuideSetting Up the SSL FeatureThis section describes how to set up the AG 3100’s SSL feature.Prerequisitesz The AG 3100 should support SSL feature. Please go to Displaying YourConfiguration Settings {Summary} on page 143 and verify that the Licensed Featuresinclude "AAA SSL Support".z You should be a business that is qualified to obtain an SSL secure server ID fromdifferent Certificate Authorities (CAs), such as VeriSign. The Certificate Authoritysets this qualification criterion.z You will need to generate your own Private Key and Certificate Signing Request(these instructions are provided below).z You must obtain your own Signed Public Key from the Certificate Authority. Theselected Certificate Authority should be commonly supported in the subscribers'browser. We recommend that you use VeriSign (all instructions in this document arebased on obtaining a key from VeriSign). Please contact Nomadix Technical Supportif you want to use a different Certificate Authority.For Nomadix technical support, go to Contact Information on page 301.Obtain a Private Key File (cakey.pem)To create a Private Key File, you must install OpenSSL on your Windows 9x or NT operatingsystem on a PC with Internet access.Requirements for Certificate Signing Request (CSR) and Key Generationz Cygwin and OpenSSL application installed on Windows 9x or NT.z 5 large random files residing on the workstation (large compressed log filesrecommended by VeriSign). These files are put in as file1:file2:file3:file4:file5 in thekey generation command.
