126 Certificates and Client AuthenticationGenerate Test CertificateIf needed, you can generate a self-signed certificate and private key fortesting purposes. After providing the requested information, the certificateand key are generated immediately.Step Action1 Specify an unused certificate number.If a certificate and key already exist for the current certificateindex number, they are overwritten when you execute the applycommand. You should therefore always choose an unusedcertificate index number before creating a test certificate.>> Main# cfg/cert 4Creating Certificate 4>> Certificate 4# test2 Provide the requested information.For a more detailed explanation of the requested information,see “Generating and Submitting a CSR Using the CLI” (page94).The combined length of the following parameters maynot exceed 225bytes.Country Name (2 letter code):State or Province Name (full name):Locality Name (eg, city):Organization Name (eg, company):Organizational Unit Name (eg, section):Common Name (eg, your name or your server’s hostname):Email Address:Subject alternative name (blank or comma separated list ofURI:, DNS:, IP:, email:-address>):Valid for days [365]:Key size (512/1024/2048/4096) [1024]:Test key and certificate added.Use ’apply’ to activate.3 Apply the changes.The test certificate is now ready to be mapped to an SSL server.Nortel VPN GatewayUser GuideNN46120-104 02.01 Standard14 April 2008Copyright © 2007-2008 Nortel Networks.
