User Manual

8: Security Settings
PremierWave EN User Guide 43
Certificate Generation
Settings
Description
Key length
Select the bit size of the new self-signed certificate. Choices are:
 512 bits
 768 bits
 1024 bits
 2048 bits
The larger the bit size, the longer it takes to generate the key.
Approximate times are:
 2 seconds for a 512-bit RSA key
 2 seconds for a 768-bit RSA key
 5 seconds for a 1024-bit RSA key
 30 seconds for a 2048 bit RSA key
 3 seconds for a 512-bit DSA key
 8 seconds for a 768-bit DSA key
 30 seconds for a 1024-bit DSA key

3 minutes for a 2048 bit DSA key
Type
Select the type of key:
 RSA = Public-Key Cryptography algorithm based on large prime
numbers, invented by Rivest Shamir and Adleman. Used for
encryption and signing.
 DSA = Digital Signature Algorithm also based on large prime
numbers, but can only be used for signing. Developed by the US
government to avoid the patents on RSA.
Table 8-8 Using the CLI to Generate a Certificate/Key Pair
Command level
enable>ssl
Commands
generate rsa <cert_name>
generate dsa <cert_name>