Type the following command (without quotes): Open a command prompt window (Windows) or terminal window (Linux/macOS) and 'cd' into the RootCA directory. KeyUsage = critical, digitalSignature, keyEnciphermentĮxtendedKeyUsage = serverAuth Create the CAįor this document we will be using OpenSSL to create our certificates.
NsComment = "OpenSSL Generated Server Certificate"ĪuthorityKeyIdentifier = keyid,issuer:always KeyUsage = critical, nonRepudiation, digitalSignature, keyEnciphermentĮxtendedKeyUsage = clientAuth, emailProtection NsComment = "OpenSSL Generated Client Certificate" KeyUsage = critical, digitalSignature, cRLSign, ke圜ertSign OrganizationalUnitName_default = Tech SupportĪuthorityKeyIdentifier = keyid:always,issuer OrganizationalUnitName = Organizational Unit NameĠ.organizationName_default = ZyXEL Communications StateOrProvinceName = State or Province Name openssl.cnf file with the following info (update "dir" setting)ĭistinguished_name = req_distinguished_nameĬountryName = Country Name (2 letter code).Supported DevicesĪdd the following to the RootCA directory. This feature allows network administrators to protect the ZyXEL appliance from unauthorized login attempts. This guide covers the creation of a root certificate authority and client certificates.
To do that the SSL client must have a CA-signed certificate from a CA that has been imported as a trusted CA on the ZyXEL device. OverviewĪuthenticate Client Certificates requires the SSL client to authenticate itself to the ZyXEL device by sending a certificate. This guide will help setup the "Authenticate Client Certificates" option for the ZyWALL/USG web configuration.
0 kommentar(er)
