To do this type the following command into the Windows Command Prompt (without quotes). First, we must tell the machine where the OpenSSL configuration file (openssl.cnf) is located.

To begin the setup there are a few things we need to do on a Windows machine.

The 1000 refers to the serial number that will be given to client certificates, you can specify whatever number you wish to start at, for this example we will start at 1000. Type the following command (without quotes): Open a command prompt window (Windows) or terminal window (Linux/macOS) and 'cd' into the RootCA directory. KeyUsage = critical, digitalSignature, keyEnciphermentĮxtendedKeyUsage = serverAuth Create the CAįor this document we will be using OpenSSL to create our certificates. NsComment = 'OpenSSL Generated Server Certificate'ĪuthorityKeyIdentifier = keyid,issuer:always KeyUsage = critical, nonRepudiation, digitalSignature, keyEnciphermentĮxtendedKeyUsage = clientAuth, emailProtection NsComment = 'OpenSSL Generated Client Certificate' KeyUsage = critical, digitalSignature, cRLSign, ke圜ertSign OrganizationalUnitName_default = Tech SupportĪuthorityKeyIdentifier = keyid:always,issuer OrganizationalUnitName = Organizational Unit NameĠ.organizationName_default = ZyXEL Communications StateOrProvinceName = State or Province Name

openssl.cnf file with the following info (update 'dir' setting)ĭistinguished_name = req_distinguished_nameĬountryName = Country Name (2 letter code).

Supported DevicesĪdd the following to the RootCA directory. This feature allows network administrators to protect the ZyXEL appliance from unauthorized login attempts. This guide covers the creation of a root certificate authority and client certificates. To do that the SSL client must have a CA-signed certificate from a CA that has been imported as a trusted CA on the ZyXEL device. OverviewĪuthenticate Client Certificates requires the SSL client to authenticate itself to the ZyXEL device by sending a certificate. This guide will help setup the 'Authenticate Client Certificates' option for the ZyWALL/USG web configuration.

Zyxel secuextender mac