Differences

This shows you the differences between two versions of the page.

--- pfsense:certificates:create_a_certificate_authority_ca [2022/08/18 07:30] – 185.198.243.242
+++ pfsense:certificates:create_a_certificate_authority_ca [2022/08/18 07:46] (current) – 185.198.243.242
@@ Line 1: / Line 1: @@
 ====== PFSense - Certificates - Create a Certificate Authority (CA) ======
+A Certificate Authority (CA) is a trusted entity that issues Secure Sockets Layer (SSL) certificates.
+----
+===== Create the CA =====
 Navigate to **System -> Cert Manager**.
   * Select the **CA** tab and create a CA by pressing the **“+”** button.
-  * Populate the fields with the appropriate information, making sure to change method to **Create Internal Certificate Authority**.
-    * Alternatively you can also import your own. (outside the scope of this guide)
+In **Create / Edit CA**:
+  * Descriptive Name: **<some name to make it easy to identify**.
+  * Method: **Create Internal Certificate Authority**.
+  * Trust Store:  **<Not Checked>**.
+  * Randomize Serial:  **<Checked>**.
+In **Internal Certificate Authority**:
+  * Key Type: **RSA**.
+  * Key length: **2048 bit**.
+  * Digest Algorithm:  **SHA 256**.
+  * Lifetime: 3650. **(10 years)**.
+  * Common Name: **ShareWiz - OpenVPN CA**.
+  * Country Code: **JE**.
+  * State or Province: **<blank>**.
+  * City: **St. Helier**.
+  * Organization: **ShareWiz**.
+  * Organizational Unit: **<blank>**.
 ----