Generating Key Pairs
A key pair can be generated with the machine when it is required for encrypted communication via Transport Layer Security (TLS). You can use TLS when accessing the machine via the Remote UI. Up to five key pairs, including the preinstalled pairs, can be registered. Self-signed certificates are used with key pairs generated in "Network Communication." With a "Key and Certificate Signing Request (CSR)", you can apply for a CA-issued digital certificate for the key pair generated by the machine.
Generate Network Communication Key
1
Start the Remote UI and log on in System Manager Mode. Starting the Remote UI
2
Click [Settings/Registration].
3
Click [Security Settings] 
[Key and Certificate Settings].
[Key and Certificate Settings].
4
Click [Generate Key].
Deleting a registered key pair
Click [Delete] on the right of the key pair you want to delete click [OK].
click [OK].A key pair cannot be deleted if it is currently used for some purpose, such as when [TLS] or [IEEE 802.1X] is displayed under [Key Usage]. In this case, disable the function or replace the key pair before deleting it. The preinstalled CA certificates cannot be deleted.
5
Select [Network Communication] and click [OK].
6
Specify settings for the key and certificate.
[Key Settings][Key Name]
Enter up to 24 alphanumeric characters for naming the key pair. Set a name that will be easy for you to find later in a list.
Enter up to 24 alphanumeric characters for naming the key pair. Set a name that will be easy for you to find later in a list.
[Signature Algorithm]
Select the signature algorithm from the drop-down list.
Select the signature algorithm from the drop-down list.
[Key Algorithm]
RSA is used for generating a key pair. Select the key length from the drop-down list. The larger the number for the key length, the slower the communication. However, the security is tighter.
RSA is used for generating a key pair. Select the key length from the drop-down list. The larger the number for the key length, the slower the communication. However, the security is tighter.
[512-bit] cannot be selected for the key length, if [SHA384] or [SHA512] is selected for [Signature Algorithm].
[Certificate Settings][Validity Start Date (YYYY/MM/DD)]
Enter the first date of validity of the certificate in year/month/day format in the range January 1, 2000 to December 31, 2099.
Enter the first date of validity of the certificate in year/month/day format in the range January 1, 2000 to December 31, 2099.
[Validity End Date (YYYY/MM/DD)]
Enter the last date of validity of the certificate in year/month/day format in the range January 1, 2000 to December 31, 2099. A date earlier than the [Validity Start Date (YYYY/MM/DD)] cannot be set.
Enter the last date of validity of the certificate in year/month/day format in the range January 1, 2000 to December 31, 2099. A date earlier than the [Validity Start Date (YYYY/MM/DD)] cannot be set.
[Country/Region]
Click the [Select Country/Region] radio button and select the country/region from the drop-down list. You can also click the [Enter Internet Country Code] radio button and enter a country code, such as "US" for the United States.
Click the [Select Country/Region] radio button and select the country/region from the drop-down list. You can also click the [Enter Internet Country Code] radio button and enter a country code, such as "US" for the United States.
[State]/[City]
Enter up to 24 alphanumeric characters for the location as necessary.
Enter up to 24 alphanumeric characters for the location as necessary.
[Organization]/[Organization Unit]
Enter up to 24 alphanumeric characters for the organization name as necessary.
Enter up to 24 alphanumeric characters for the organization name as necessary.
[Common Name]
Enter up to 48 alphanumeric characters for the common name of the certificate as necessary. "Common Name" is often abbreviated as "CN."
Enter up to 48 alphanumeric characters for the common name of the certificate as necessary. "Common Name" is often abbreviated as "CN."
7
Click [OK].
Keys for network communication may take approximately 10 to 15 minutes to generate.
After a key pair is generated, it is automatically registered to the machine.
Generate Key and Certificate Signing Request (CSR)
1
Start the Remote UI and log on in System Manager Mode.
Starting the Remote UI
Starting the Remote UI
2
Click [Settings/Registration].
3
Click [Security Settings] [Key and Certificate Settings].
[Key and Certificate Settings].4
Click [Generate Key].
Deleting a registered key pair
Click [Delete] on the right of the key pair you want to delete click [OK].
click [OK].A key pair cannot be deleted if it is currently used for some purpose, such as when [TLS] or [IEEE 802.1X], is displayed under [Key Usage]. In this case, disable the function or replace the key pair before deleting it.
5
Select [Key and Certificate Signing Request (CSR)] and click [OK].
6
Specify settings for the key and certificate.
[Key Settings][Key Name]
Enter up to 24 alphanumeric characters for naming the key pair. Set a name that will be easy for you to find later in a list.
Enter up to 24 alphanumeric characters for naming the key pair. Set a name that will be easy for you to find later in a list.
[Signature Algorithm]
Select the signature algorithm from the drop-down list.
Select the signature algorithm from the drop-down list.
[Key Algorithm]
RSA is used for generating a key pair. Select the key length from the drop-down list. The larger the number for the key length, the slower the communication. However, the security is tighter.
RSA is used for generating a key pair. Select the key length from the drop-down list. The larger the number for the key length, the slower the communication. However, the security is tighter.
[512-bit] cannot be selected for the key length, if [SHA384] or [SHA512] is selected for [Signature Algorithm].
[Certificate Signing Request (CSR) Settings][Country/Region]
Click the [Select Country/Region] radio button and select the country/region from the drop-down list. You can also click the [Enter Internet Country Code] radio button and enter a country code, such as "US" for the United States.
Click the [Select Country/Region] radio button and select the country/region from the drop-down list. You can also click the [Enter Internet Country Code] radio button and enter a country code, such as "US" for the United States.
[State]/[City]
Enter up to 24 alphanumeric characters for the location as necessary.
Enter up to 24 alphanumeric characters for the location as necessary.
[Organization]/[Organization Unit]
Enter up to 24 alphanumeric characters for the organization name as necessary.
Enter up to 24 alphanumeric characters for the organization name as necessary.
[Common Name]
Enter up to 48 alphanumeric characters for the common name of the certificate as necessary. "Common Name" is often abbreviated as "CN."
Enter up to 48 alphanumeric characters for the common name of the certificate as necessary. "Common Name" is often abbreviated as "CN."
7
Click [OK].
Key and Certificate Signing Request (CSR) may take approximately 10 to 15 minutes to generate.
8
Click [Store in File].
A dialog box for storing the file appears. Choose where to store the file and click [Save].
The Key and Certificate Signing Request (CSR) file is stored on the computer.
9
Attach the stored file and submit the application to the certification authority.
Register the digital certificate issued by the certification authority.
You cannot use the key pair generated by the Certificate Signing Request (CSR) until the certificate is registered. Once the certification authority has issued the digital certificate, register it using the procedure below.
1
Start the Remote UI and log on in System Manager Mode. Starting the Remote UI
2
Click [Settings/Registration].
3
Click [Security Settings] [Key and Certificate Settings].
[Key and Certificate Settings].4
Click [Key Name] or [Certificate] for the certificate to be registered.
5
Click [Register Certificate].
6
Click [Browse], specify the file for the certificate signing request, and click [Register].
