Chapter 8: Security Management143f. Country (ISO code) - The country where the organization islocated. This is the two-letter ISO code, e.g. DE for Germany, orUS for the U.S.g. Challenge Password - Some certification authorities require achallenge password to authorize later changes on the certificate(e.g. revocation of the certificate). Applicable when generating aCSR for CA Certification.h. Confirm Challenge Password - Confirmation of the ChallengePassword. Applicable when generating a CSR for CACertification.i. Email - The email address of a contact person that is responsiblefor the KX II-101-V2 and its security.j. Key length - The length of the generated key in bits. 1024 is thedefault.3. To generate, do one of the following: To generate self-signed certificate, do the following:a. Select the Create a Self-Signed Certificate checkbox if you needto generate a self-signed certificate. When you select this option,the KX II-101-V2 generates the certificate based on your entries,and acts as the signing certificate authority. The CSR does notneed to be exported and used to generate a signed certificate.b. Specify the number of days for the validity range. Ensure the KXII-101-V2 date and time are correct, otherwise an invalid datemay be used to create the certificate's valid from and to range.c. Click Create.d. A confirmation dialog is displayed. Click OK to close it.e. Reboot the KX II-101-V2 to activate the self-signed certificate. To generate a CSR to send to the CA for certification:a. Click Create.
