![\"\"](\"https:\/\/rlab.cavtime.net\/wp-content\/uploads\/2023\/12\/Credentials_Certificate_01s-1.png\")
<\/p>\nTrueNAS Scale \u3067 CSR \u3092\u4f5c\u6210\u3059\u308b\u624b\u9806\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/p>\n
TrueNAS Scale 23.10.0.1<\/p>\n
<\/p>\n
![\"\"](\"https:\/\/rlab.cavtime.net\/wp-content\/uploads\/2023\/12\/Credentials_Certificate_CSR_01s.png\")
<\/p>\n
![\"\"](\"https:\/\/rlab.cavtime.net\/wp-content\/uploads\/2023\/12\/Credentials_Certificate_CSR_02s.png\")
<\/p>\n
Name<\/strong><\/p>\n Descriptive identifier for this certificate.<\/p><\/blockquote>\n Type<\/strong><\/p>\n Certificate Signing Requests control when an external CA will issue (sign) the certificate. Typically used with ACME or other CAs that most popular browsers trust by default Import Certificate Signing Request lets you import an existing CSR onto the system. Typically used with ACME or internal CAs.<\/p><\/blockquote>\n Profile<\/strong><\/p>\n Predefined certificate extensions. Choose a profile that best matches your certificate usage scenario.<\/p><\/blockquote>\n Key Type<\/strong><\/p>\n See Why is elliptic curve cryptography not widely used, compared to RSA? for more information about key types.<\/p><\/blockquote>\n Key Length<\/strong><\/p>\n The number of bits in the key used by the cryptographic algorithm. For security reasons, a minimum key length of 2048 is recommended.<\/p><\/blockquote>\n Digest Algorithm<\/strong><\/p>\n The cryptographic algorithm to use. The default\u00a0<\/span>SHA256<\/i>\u00a0only needs to be changed if the organization requires a different algorithm.<\/span><\/p><\/blockquote>\n Country<\/strong><\/p>\n Select the country of the organization.<\/p><\/blockquote>\n State<\/strong><\/p>\n Enter the state or province of the organization.<\/span><\/p><\/blockquote>\n Locality<\/strong><\/p>\n Enter the location of the organization. For example, the city.<\/span><\/p><\/blockquote>\n Organization<\/strong><\/p>\n Enter the name of the company or organization.<\/span><\/p><\/blockquote>\n Organizational Unit<\/strong><\/p>\n Organizational unit of the entity.<\/span><\/p><\/blockquote>\n Email<\/strong><\/p>\n Enter the email address of the person responsible for the CA.<\/span><\/p><\/blockquote>\n Common Name<\/strong><\/p>\n Enter the fully-qualified hostname (FQDN) of the system. This name must be unique within a certificate chain.<\/p><\/blockquote>\n Subject Alternative Name<\/strong><\/p>\n Multi-domain support. Enter additional domains to secure. Separate domains by pressing\u00a0<\/span> Basic Constraints<\/strong><\/p>\n Activate the Basic Constraints extension to identify whether the certificate’s subject is a CA and the maximum depth of valid certification paths that include this certificate.<\/span><\/p><\/blockquote>\n Path Length<\/strong><\/p>\n How many non-self-issued intermediate certificates that can follow this certificate in a valid certification path. Entering\u00a0<\/span>0<\/i>\u00a0allows a single additional certificate to follow in the certificate path. Cannot be less than\u00a0<\/span>0<\/i>.<\/span><\/p><\/blockquote>\n Basic Constraints Config<\/strong><\/p>\n Specify whether to use the certificate for a Certificate Authority and whether this extension is critical. Clients must recognize critical extensions to prevent rejection. Web certificates typically require you to disable CA and enable Critical Extension.<\/span><\/p><\/blockquote>\n Extended Key Usage<\/strong><\/p>\n Activate this certificate extension.The Extended Key Usage extension identifies and limits valid uses for this certificate, such as client authentication or server authentication.See\u00a0<\/span>RFC 3280, section 4.2.1.13<\/a>\u00a0for more details.<\/span><\/p><\/blockquote>\n Usages<\/strong><\/p>\n Identify the purpose for this public key. Typically used for end entity certificates. Multiple usages can be selected. Do not mark this extension critical when the Usage is ANY_EXTENDED_KEY_USAGE.<\/p>\n Using both Extended Key Usage and Key Usage extensions requires that the purpose of the certificate is consistent with both extensions. See RFC 3280, section 4.2.1.13 for more details.<\/p><\/blockquote>\n Critical Extension<\/strong><\/p>\n Identify this extension as critical for the certificate. Critical extensions must be recognized by the certificate-using system or this certificate will be rejected. Extensions identified as not critical can be ignored by the certificate-using system and the certificate still approved.<\/p><\/blockquote>\n Key Usage<\/strong><\/p>\n Activate this certificate extension. The key usage extension defines the purpose (e.g., encipherment, signature, certificate signing) of the key contained in the certificate. The usage restriction might be employed when a key that could be used for more than one operation is to be restricted. For example, when an RSA key should be used only to verify signatures on objects other than public key certificates and CRLs, the\u00a0<\/span>Digital Signature<\/i>\u00a0bits would be asserted. Likewise, when an RSA key should be used only for key management, the\u00a0<\/span>Key Encipherment<\/i>\u00a0bit would be asserted.<\/span> Key Usage Config<\/strong><\/p>\n Specify this certificate’s valid Key Usages. Web certificates typically need at least Digital Signature and possibly Key Encipherment or Key Agreement, while other applications may need other usages.<\/span><\/p><\/blockquote>\n Overview TrueNAS Scale \u3067 CSR \u3092\u4f5c\u6210\u3059\u308b\u624b\u9806\u3092\u78ba\u8a8d\u3059\u308b\u3002 Reference Environment TrueNAS Scale 23.10.0.1 Certificate Signing R […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[37,74],"tags":[],"class_list":["post-3610","post","type-post","status-publish","format-standard","hentry","category-certificate","category-nas"],"_links":{"self":[{"href":"https:\/\/rlab.cavtime.net\/index.php?rest_route=\/wp\/v2\/posts\/3610","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rlab.cavtime.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rlab.cavtime.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rlab.cavtime.net\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/rlab.cavtime.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3610"}],"version-history":[{"count":2,"href":"https:\/\/rlab.cavtime.net\/index.php?rest_route=\/wp\/v2\/posts\/3610\/revisions"}],"predecessor-version":[{"id":3661,"href":"https:\/\/rlab.cavtime.net\/index.php?rest_route=\/wp\/v2\/posts\/3610\/revisions\/3661"}],"wp:attachment":[{"href":"https:\/\/rlab.cavtime.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3610"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rlab.cavtime.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3610"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rlab.cavtime.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3610"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}\n
\n
Certificate Options<\/span><\/h3>\n
![\"\"](\"https:\/\/rlab.cavtime.net\/wp-content\/uploads\/2023\/12\/Credentials_Certificate_CSR_03s.png\")
<\/p>\n\n
\n
\n
Certificate Subject<\/span><\/h3>\n
![\"\"](\"https:\/\/rlab.cavtime.net\/wp-content\/uploads\/2023\/12\/Credentials_Certificate_CSR_04s.png\")
<\/p>\n\n
Enter<\/code>\u00a0For example, if the primary domain is\u00a0<\/span>example.com<\/i>, entering\u00a0<\/span>www.example.com<\/i>\u00a0secures both addresses.<\/span><\/p><\/blockquote>\nExtra Constraints<\/h3>\n
![\"\"](\"https:\/\/rlab.cavtime.net\/wp-content\/uploads\/2023\/12\/Credentials_Certificate_CSR_05s.png\")
<\/p>\n\n
\n
\n
\n
\n
\nSee\u00a0<\/span>RFC 3280, section 4.2.1.3<\/a>\u00a0for more information.<\/span><\/p><\/blockquote>\n\n
\n
Confirm Options<\/h3>\n
![\"\"](\"https:\/\/rlab.cavtime.net\/wp-content\/uploads\/2023\/12\/Credentials_Certificate_CSR_06s.png\")
<\/p>\n","protected":false},"excerpt":{"rendered":"