Netscreen – ScreenOS


To generate a CSR, you will need to create a key pair for your server.

Generate a Key Pair and CSR

NOTE: A key length of 1024 bit is the default, but Geotrust recommends the use of a 2048 bit key.

If the request is intended for an Extended Validation certificate or a certificate with a validity period beyond December 31, 2013, the 2048 bit key length will need to be selected

  1. Open the WebUI.
  2. From the Options menu, click Configuration, then Date/Time.
  3. From the Date/Time page, click Sync Click with Client. Ensure that ‘Automatically adjust clock for daylight savings changes’ is selected.
  4. From the Options menu, click Network, then click DNS.
  5. Enter the Hostname of the device in the Hostname textbox. Enter the Domain name of the device in the Domain name textbox. These two together will become the Common Name.
  6. From the Options menu, click Objects, click Certificates, and then click New.
  7. Fill out all of the necessary fields and then click Generate. You have just created a key pair and a CSR.
  8. To copy and paste the information into the enrollment form, open the file in a text editor that does not add extra characters (Notepad or Vi are recommended).
  9. Copy and paste the CSR into the enrollment pages.
 Posted by at 14:23