Corporation Network Router User Manual

Managing Certificates
8-22 Oracle Database Advanced Security Administrator's Guide
Table 8–6 lists the available key sizes and the relative security each size provides.
Typically, CAs use key sizes of 1024 or 2048. When certificate owners wish to keep
their keys for a longer duration, they choose 3072 or 4096 bit keys.
Importing the User Certificate into the Wallet
The certificate authority sends you an e-mail notification when your certificate
request has been fulfilled. Import the certificate into a wallet in either of two ways:
copy and paste the certificate from the certificate authority's e-mail, or import the
user certificate from a file. Certificate authorities may send your certificate in a
PKCS #7 certificate chain file, or as an individual X.509 certificate. Oracle Wallet
Manager can import both types. PKCS #7 certificate chains are a collection of
Organization Optional.Enter the name of the identity's organization.
Example: XYZ Corp.
Locality/City Optional. Enter the name of the locality or city in which the
identity resides.
State/Province Optional. Enter the full name of the state or province in which
the identity resides.
Enter the full state name, because some certificateauthorities do
not accept two–letter abbreviations.
Country Mandatory. Choose to view a list of country abbreviations.
Select the country in which the organization is located.
Key Size Mandatory. Choose to view a list of key sizes to use when
creating the public/private key pair. See Table 8–6 to evaluate
key size.
Advanced Optional. Choose Advanced to view the Advanced Certificate
Request dialog panel. Use this field to edit or customize the
identity's distinguished name (DN). For example, you can edit
the full state name and locality.
Table 8–6 Available Key Sizes
Key Size Relative Security Level
512 or 768 Not regarded as secure.
1024 or 2048 Secure.
3072 or 4096 Very secure.
Table 8–5 (Cont.) Certificate Request: Fields and Descriptions
Field Name Description