To enroll for a certificate, obtain a root certificate first, then Install the Digital Certificates on the VPN Concentrator. Once the root certificate is installed, you can generate a CSR through the Simple Certificate Enrollment Protocol (SCEP).

Generating the CSR

Step 1 In the Administration | Certificate Management screen, click Click here to enroll with a Certificate Authority.
The Administration | Certificate Management | Enroll screen displays.

Step 2 Click SSL certificate. The Administration | Certificate Management | Enroll |
Identity Certificate screen displays.

Click Enroll via PKCS10 Request.
The Administration | Certificate Management | Enroll | Identity Certificate | PKCS10 Screen displays.

Step 4 Enter values in each of the fields on this screen.

Step 5 When you have finished, click Enroll.
The Administration | Certificate Management | Enroll | Request Generated screen displays.

Note You must complete the enrollment and certificate installation process within one week of generating the request. If you do not, the pending request is deleted.

As the screen text indicates, within a few seconds, a browser window opens with the certificate request.

You have generated a base 64 encoded PKCS#10 file (Public Key Certificate Syntax-10). The system automatically saves this file in Flash memory with the filename shown in the browser (pkcsNNNN.txt).

In generating the request, the system also generates the private key used in the PKI process. That key remains on the VPN Concentrator in encrypted form.

Step 6 Select and copy the entire request to the clipboard, and then paste the request into the CSR text box on the order form for your SSL certificate at Networking4all and submit it along with your order.

Step 7 Finished.