Specifications

Managing Security Certificate Signing Request
7
ShoreTel Mobility Router Administration Guide 71
Certificate Signing Request
Administrators can generate a Certificate Signing Request (CSR) for all Mobility Router Certificates.
The Mobility Router stores only one set of CSRs and corresponding private keys per type of certificate,
and automatically syncs them to the standby node, if applicable.
Generating a Mobility Router Certificate
The Mobility Router Certificate page displays the date and time that the last certificate was generated.
1. Select Configuration > System > Certificate > Mobility Router.
1. If you are running a Mobility Router in a standalone environment, select Standalone to
generate a Local Access or Remote Access certificate
or
2. If you are running a Mobility Router in a clustered configuration, select Clustered to
generate a Local Access or Remote Access certificate.
2. Click Generate. If the remote access configuration does not match the certificate, a warning
message displays as follows:
Warning: Certificate Subject CN <> does not match Remote Access configuration <>.
3. In the Country Name field, type the two-letter country code for the country where the Mobility
Router is located. The default is US.
4. In the State or Province, field, type the state or province where the Mobility Router is located.
5. In the Locality field, type the locality where the Mobility Router is located. Typically, this is the
name of a city.
6. In the Organization field, type the name of the organization. Typically, this is the name of the
company.
7. In the Organization Unit field, type the name of the organization unit (for example, enter the name
of a department within the organization).
WARNING!
Before proceeding with the following steps to generate a Mobility Router Certificate, first install the
Certificate Authority (CA). See “Certificate Authority” on page 66.
Note
The following example generates a standalone Remote Access certificate.