Creating and Installing a Self-Signed Certificate

Language:

When the certificate and key files for the HPDU device are unavailable, an alternative (other than submitting a CSR to the CA), is to generate a self-signed certificate.

Select Device Settings → Security → TLS Certificate.

Enter information in the Required fields.

A password is not required for a self-signed certificate and so the Challenge and Confirm Challenge fields do not display.

Self-Signed Certificate Information	Description
Country	Country where your company is located. Use the standard ISO country code. For a list of ISO codes, visit the ISO website (https://www.iso.org/iso-3166-country-codes.html).
State or Province	Full name of the state or province where your company is located.
Locality	City where your company is located.
Organization	Registered name of your company.
Organizational Unit	Name of your department.
Common Name	Fully qualified domain name (FQDN) of your HPDU device.
Email Address	Email address where you or another administrative user can be reached.
Key Length	Select an available key length (bits). A larger key length enhances the security, and slows down the HPDU device response. Only 2,048 is available now.
Self Sign	Ensure this check box is selected, which indicates that you are creating a self-signed certificate.
Validity in Days	This field appears after you select the Self Sign check box. Type the number of days for which the self-signed certificate will be valid.

Click Create New TLS Key to create both the self-signed certificate and private key.
This might take several minutes to complete
After the self-signed certificate and private key are completed, verify the data in the New TLS Certificate section.
- If correct, click Install Key and Certificate to install the self-signed certificate and private key.
  Note - To check whether the certificate is installed successfully, verify the data in the Active TLS Certificate section.
- If incorrect, click Delete Key and Certificate to remove the self-signed certificate and private key, and then repeat Steps 1-3 to re-create them.
(Optional) To download the self-signed certificate or private key, click Download Certificate or Download Key in the New TLS Certificate section.
When prompted to open or save the file, click Save.
Note - The Download Key button in the Active TLS Certificate section is for downloading the private key of the currently-installed certificate, not the newly-created one.