42 BSGX4e Business Gateway User Guide
NN47928-102 Release 01.01
Upload SSL CSR
Use SFTP to upload an SSL CSR. The recommended directory for the uploaded CSR
file is /cf0sys/ssl. An example follows.
1.Upload the SSL CSR file:
Connecting to 192.168.134.217...
The authenticity of host '192.168.134.217 (192.168.134.217)'
can't be established.
DSA key fingerprint is
9a:1f:34:52:f1:78:d7:6c:56:5b:9d:73:f0:da:1f:c0.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.134.217' (DSA) to the
list of known hosts.
User: nnadmin
Password:
2.Set the current directory and store the CSR file in it:
sftp> cd /cf0sys/ssl
sftp> put csr.pem
Uploading csr.pem to /cf0sys/ssl/csr.pem
3.Ensure that the CSR file is in the current directory:
sftp> ls
rsakey.dat csr.pem
At this point, use the imported CSR to generate the SSL certificate as described in
the next section “SSL Certificate” (page 42).
> config ssl certificate x509 import /cf0sys/ssl/csr.pem
*> save
SSL Certificate
A system administrator can use the SSL certificate to configure an X509 certificate
used by the SSL server. Two methods exist to configure the X509 certificate: either
the SSL CSR record is self-signed, or the SSL CSR is signed by an external certificate
authority and an X509 certificate is imported into the SSL certificate.
locality Locality or city name (such as, Fremont).
orgname Company name (such as, NewCo).
orgunit Organizational unit (such as, Engineering).
commonname Domain name (such as, www.example.com).
Table 9. SSL CSR Configuration Parameters (continued)
Parameter Description
