
discovered. If there is a hostname reference of an Security Manager device in the database,
Security Manager will generate the request (CSR) with the hostname in the Common Name
field. If an IP Address based Common Name is desired, the Security Manager discovered
device will have to be rediscovered without resolving to a hostname. Without hostname
reference in the Security Manager database, Security Manager will generate the request (CSR)
with the IP address in the Common Name field. The other fields; OU, O, L, S and C are used
to complete the subject information and usually reflect company and location information.
Identity certificate subject settings should be set in accordance with company policy.
8. Organization Unit (OU)
See above
9. City (L)
See above
10. State (S)
See above
11. Country (C)
See above
12. Include Subject Alternate Name
Subject Alternate Names (SANs) allow for more than one fully
qualified domain name to be protected using a single
certificate. When this slide bar is enabled, Security Manager
will include SANs for IP Address, FQDN, hostname, and User
Principal Name (UPN) into the certificate. One purpose would
be to browse to IP Address, hostname or FQDN without
receiving an error regarding the certificate being invalid.
Another purpose would be to ensure the device can properly
validate onto an 802.1x network by having the UPN match the
AD User Account or FQDN match the AD computer account.
You must choose HP Security Manager as the CSR Source in
order to write SANs into the certificate.
13. Domain Name
Enter a Domain Name in order for a User Principal Name
(UPN) to be added as a Subject Alternate name (SAN) into a
certificate. UPN is formed by taking the 802.1x User Name
from the device and appending the entered Domain Name after an @ symbol.
14. Key Length
Key length is the size measured in bits of the key used in a cryptographic algorithm. The
algorithm’s key length is distinct from its cryptographic security. Use the drop-down menu to
Comentarios a estos manuales