Generating a CRT key (SSL encryption key)[CRT key generate]• A CRT key cannot be generated when self-signed certificates andserver certificates are enabled.• The size of the key that can be used by the Certificate Authority (CA)differs when using a server certificate. Confirm in advance the the sizeof the key that can be used.• Generating a CRT key takes about 1 minute for 1024 bit and about 2minutes for 2048 bit. Do not operate the web browser until CRT keygeneration is complete. Image display and communication speed mayreduce while generating a CRT key.1. Click the [Execute] button in [CRT key generate].The [Current CRT key] dialog is displayed.2. The size of the generated CRT key is selected from[1024bit]/[2048bit] in [CRT key generate] – [RSA key size].• When using a server certificate, the RSA key size must be inaccordance with the demands of the Certificate Authority (CA) whichwill be applied to.3. Click the [Execute] button.CRT key generation starts.When CRT key generation stops, the size of the CRT key generatedby the [Current CRT key] and the date and time generation concludedwill be displayed.• Perform procedures 1 to 3 to change (update) the generated CRTkey. Because the CRT key, self-signed certificate and servercertificate are enabled as a set, it will be necessary to once againgenerate a self-signed certificate or apply for a server certificatewhen the CRT key is changed.• When the CRT key is changed, previous CRT keys are historicallymanaged one at a time. Clicking the [History] button in the [CRTkey] of the [Current CRT key] dialog displays the [Previous CRTkey] dialog, allowing confirmation of the key size and the date andtime generation was completed.Clicking the [Apply] button in [Previous CRT key] allows theprevious CRT key to be switched to the current CRT key. Generating a self‑signed certificate (securitycertificate)[Self‑signed Certificate ‑ Generate]• A self-signed certificate cannot be generated when a CRT key has notbeen generated.1. Click the [Execute] button in [Self-signed Certificate] -[Generate].[Self-signed Certificate - Generate] is displayed.2. Input information relating to the certificate to begenerated.Items to be entered are as follows.Item Description Maximum numberof charactersCommon Name Inputs the camera addressor host name. 64 charactersCountry Inputs the country code.(can be abbreviated)2 characters:country codeState Inputs the name of the state.(can be abbreviated) 128 charactersLocality Inputs the name of the city.(can be abbreviated) 128 charactersOrganizationInputs the name of theorganization.(can be abbreviated)64 charactersOrganizational UnitInputs the name of theorganizational unit.(can be abbreviated)64 charactersCRT keyDisplays the size of thecurrent CRT key and thedate and time generationwas completed.• Characters that can be input for [Common Name], [Country], [State],[Locality], [Organization], [Organizational Unit] are 0 to 9, A to Z,a to z, and the following symbols: -. _ , + / ( ).• When connecting the camera to the Internet, set the address orhost name to be accessed from the Internet in [Common Name]. Inthis case, when accessing the camera locally, a security warningscreen is displayed every time the camera is accessed even when asecurity certificate is installed.• When inputting the IPv6 address in [Common Name], surround theaddress with [ ].e.g. [2001:db8::10]123Web screen configurations (continued)
