|
Steps to
create the internal interface certificate request for an Audio/Video Edge Server |
Followings are the steps to configure an internal
interface certificate for an Audio/Video Edge Server
On the Delayed or Immediate Request page, select
the Prepare the request now, but send it later
check box, and then click Next.
On the Name and Security Settings page, type a
friendly name for the certificate, and specify the bit
length (typically, the default of 1024), select the
Mark certificate as exportable check box, and then
click Next.
On the Your Server’s Subject Name page, type or
select the subject name and subject alternate name of
the edge server. The subject name should match the FQDN
of the edge server published by the internal firewall
for the internal interface on which you are configuring
the certificate:
·
For the internal interface of the edge
server, this subject name should match the name that
your internal servers use to connect to the edge server
(typically, the FQDN of the internal interface for the
edge server).
·
If you are using a load balancer, the edge
server traffic still uses the FQDN of the internal edge
of the server (server name), but if you are using a
virtual IP address for the edge server, the certificate
should match the server FQDN of the virtual IP address
used by this server role on the internal load balancer.
For the internal interface, this is typically the
published DNS name for the perimeter network that maps
to the edge server.
Click Next.
On the Geographical Information page, type the
location information, and then click Next.
On the Certificate Request File Name page, type
the full path and file name to which the request is to
be saved in the File name box (or click Browse
to locate and select the certificate), and then click
Next. For example,
C:\certrequest_AVEdge.txt
On the Request Summary page, click Next.
On the wizard completion page, verify successful
completion, and then click Finish.
Submit this file to your CA (by e-mail or other method
supported by your organization for your Enterprise CA)
and, when you receive the response file, copy the new
certificate to this computer so it is available for
import.
