Standby Certificate Request tab
The Standby Certificate Request tab enables you to enter the information needed to generate a self-signed certificate or a standardized certificate-signing request to a certificate authority.
Required Information
|
Field |
Possible values |
Description |
|---|---|---|
|
Country (C) |
Must be a two character country code. Acceptable characters are all alphanumeric, a space, and the following punctuation marks: ‘ ( ) + , – . / : = ? |
The two character country code that identifies the country where the Onboard Administrator is located. |
|
State or Province (ST) |
Must be 1 to 30 characters in length. |
The state or province where the Onboard Administrator is located. |
|
City or Locality (L) |
Must be 1 to 50 characters in length. |
The city or locality where the Onboard Administrator is located. |
|
Organization Name (O) |
Must be 1 to 60 characters in length. |
The organization that owns this Onboard Administrator. When this information is used to generate a certificate signing request, the issuing certificate authority can verify that the organization requesting the certificate is legally entitled to claim ownership of the given company name or organization. |
|
Common Name (CN) |
Must be 1 to 60 characters in length. To prevent security alerts, the value of this field must match exactly the host name as it is known by the web browser. The web browser compares the host name in the resolved web address to the name that appears in the certificate. For example, if the web address in the address field is https://oa-001635.xyz.com, then the value must be oa-001635.xyz.com. |
The Onboard Administrator name that appears in the browser web address field. This certificate attribute is generally referred to as the common name. |
Select Active OA Host Name to include a request for an Active Onboard Administrator certificate. Enter the information in the Active Common Name (CN) field, which must be 1 to 60 characters in length.
Optional information
|
Field |
Possible values |
Description |
|---|---|---|
|
Alternative Name |
Must be 0 to 60 characters in length. |
An alternate name for the Onboard administrator. |
|
Contact Person |
Must be 0 to 60 characters in length. |
The person responsible for the Onboard Administrator. |
|
Email Address |
Must be 0 to 60 characters in length. |
The email address of the contact person responsible for the Onboard Administrator. |
|
Organizational Unit |
Must be 0 to 60 characters in length. |
The unit within the company or organization that owns the Onboard Administrator. |
|
Surname |
Must be 0 to 60 characters in length. |
The surname of the person responsible for the Onboard Administrator. |
|
Given Name |
Must be 0 to 60 characters in length. |
The given name of the person responsible for the Onboard Administrator. |
|
Initials |
Must be 0 to 20 characters in length. |
The initials of the person responsible for the Onboard Administrator. |
|
DN Qualifier |
Must be 0 to 60 characters in length. Acceptable characters are all alphanumeric, the space, and the following punctuation marks: ‘ ( ) + , – . / : = ? |
The distinguished name qualifier of the Onboard Administrator. |
Certificate-signing request attributes
|
Field |
Possible values |
Description |
|---|---|---|
|
Challenge Password |
Must be 0 to 30 characters in length |
The password for the certificate-signing request |
|
Confirm Password |
Must be 0 to 30 characters in length |
Confirm the Challenge Password |
|
Unstructured Name |
Must be 0 to 60 characters in length |
This is for additional information (for example, an unstructured name that is assigned to the Onboard Administrator) |
Click Apply to generate a self-signed certificate or a standardized certificate-signing request.
Standardized certificate-signing request
This screen displays a standardized certificate signing request generated by the Onboard Administrator. The content of the request in the text box may can be sent to a certificate authority of your choice for signing. Once signed and returned from the certificate authority, the certificate can be uploaded under the “Certificate Upload” tab.
If a static IP address is configured for Onboard Administrator when this certificate request is generated, the certificate request will be issued to the static IP address. Otherwise, it is issued to the dynamic DNS name of the Onboard Administrator. The certificate, by default, requests a valid duration of 10 years (this value is currently not configurable).
When submitting the request to the certificate authority, be sure to:
- Use the Onboard Administrator URL for the server.
- Request the certificate be generated in the RAW format.
- Include the Begin and End certificate lines.