A CCESS GATEWAYQuick Reference Guide 273Setting Up the SSL FeatureThis section describes how to set up the Access Gateway’s SSL feature.Prerequisites You should be a business that is qualified to obtain an SSL secure server ID fromdifferent Certificate Authorities (CAs), such as VeriSign. The Certificate Authoritysets this qualification criterion. You will need to generate your own Private Key and Certificate Signing Request(these instructions are provided below). You must obtain your own Signed Public Key from the Certificate Authority. Theselected Certificate Authority should be commonly supported in the subscribers'browser. We recommend that you use VeriSign (all instructions in this document arebased on obtaining a key from VeriSign). Please contact Nomadix Technical Supportif you want to use a different Certificate Authority.For Nomadix technical support, go to “Contact Information” on page 297.Obtain a Private Key File (cakey.pem)To create a Private Key File, you must install OpenSSL on your Windows 9x or NT operatingsystem on a PC with Internet access.Requirements for Certificate Signing Request (CSR) and Key Generation Cygwin and OpenSSL application installed on Windows 9x or NT. 5 large random files residing on the workstation (large compressed log filesrecommended by VeriSign). These files are put in as file1:file2:file3:file4:file5 in thekey generation command.Downloading CygwinThere are several sources for obtaining “Cygwin” to install OpenSSL. One popular source is:http://sources.redhat.com/cygwin/.Nomadix used Cygwin version 1.3.2 for generating this section of the User Guide.
