User`s guide

423
Administration > X.509 Certificate Management > Key Generation
This page allows you to generate a private key. A private key must be created before a
certificate can be requested as it is used in the request.
Key filename
Enter a name for the private key (the filename must be prefixed with “priv” and have a
“.pem” extension).
Key size
The size of the private key in bits. The key size can be one of the following
• 384
• 512
• 768
• 1024
• 1536
• 2048
The larger the key, the more secure the connection, but also the larger the key, the slower
the connection.
Save in SSHv1 format
If this checkbox is checked the private key will be generated in SSH version 1 format. If it is
cleared the private key will be generated in SSH version 2 format.
Related CLI Commands
The
genkey command can be used to generate a private key file.
To generate a private key, enter the command
genkey 0 <keysize> <filename> <-ssh1>
where
<keysize> is the size of the key in bits.
<filename> is the name of the private key file.
<-ssh1> is optional, and will generate the private key file in SSH version 1
format.
Note: IPsec requires SSH version 2 private keys.
For example, to generate a 1024 bit SSH version 2 key called privkey.pem, enter:
genkey 1024 privkey.pem
You will see the following output:
OK
Starting 1024 bit key generation. Please wait. This may take some
time...