Creating and installing a certificate

Step by step chart for creating and installing a certificate


Self-signed certificate	or	Certificate from a CA

Create a self-signed certificate using Web Based Management. (See How to create and install a self-signed certificate.)		Create a CSR using Web Based Management. (See How to create a CSR.)

Install the self-signed certificate to your computer. (See How to install the self-signed certificate on your computer.)		Install the certificate issued by the CA to your Brother machine using Web Based Management. (See How to install the certificate to your machine.)

You have completed creating and installing the certificate.		Install the certificate to your computer. (See How to install the certificate to your machine.)

		You have completed creating and installing the certificate.

Page Top

How to create and install a self-signed certificate

Click Create Self-Signed Certificate on the Certificate page.

Enter a Common Name and a Valid Date.

Note

•	The length of the Common Name is less than 64 bytes. Enter an identifier such as an IP address, node name or domain name to use when accessing this machine through SSL/TLS communication. The node name is displayed by default.
•	A warning will pop-up if you use the HTTPS protocol and enter a different name in the URL than the Common Name that was used for the self-signed certificate.

You can choose the Public Key Algorithm and Digest Algorithm settings from the pull-down list. The default settings are RSA(2048bit) for Public Key Algorithm and SHA256 for Digest Algorithm.

Click Submit.

The self-signed certificate is created and saved in your machine's memory successfully.

To use SSL/TLS communication, the self-signed certificate also needs to be installed on your computer. Proceed to the next section.

Page Top

How to install the self-signed certificate on your computer

Note

The following steps are for Windows^® Internet Explorer^®. If you use another web browser, follow the help text of the web browser itself.

For Windows Vista^® and Windows^® 7 users that have administrator rights

Click the

button and All Programs.

Right-click Internet Explorer, and then click Run as administrator.

Note

If the User Account Control screen appears,

(Windows Vista^®) click Continue (Allow).
(Windows^® 7) click Yes.

Type “https://machine’s IP address/” into your browser to access your machine (where “machine’s IP address” is the machine’s IP address or the node name that you assigned for the certificate).

Then, click Continue to this website (not recommended).

Click Certificate Error, and then click View certificates. For the rest of the instructions, follow the steps from step 4 in For Windows^® XP users.

For Windows^® XP users

1	Start your web browser.
2	Type “https://machine’s IP address/” into your browser to access your machine (where “machine’s IP address” is the IP address or the node name that you assigned for the certificate).
3	When the following dialog box appears, click View Certificate.
4	Click Install Certificate from the General tab.
5	When the Certificate Import Wizard appears, click Next.
6	Choose Place all certificates in the following store and then click Browse.
7	Choose Trusted Root Certification Authorities and then click OK.
8	Click Next.
9	Click Finish.
10	Click Yes.
11	Click OK.
12	The self-signed certificate is now installed on your computer, and SSL/TLS communication is available.

Page Top

How to create a CSR

Click Create CSR on the Certificate page.

Enter a Common Name and your information, such as Organization.

Note

•	We recommend that the Root Certificate from the CA be installed on your computer before creating the CSR.
•	The length of the Common Name is less than 64 bytes. Enter an identifier such as an IP address, node name or domain name to use when accessing this scanner through SSL/TLS communication. The node name is displayed by default. The Common Name is required.
•	A warning will pop-up if you enter a different name in the URL than the Common Name that was used for the certificate.
•	The length of the Organization, the Organization Unit, the City/Locality and the State/Province is less than 64 bytes.
•	The Country/Region should be an ISO 3166 country code composed of two characters.
•	If you are configuring X.509v3 certificate extension, choose the Configure extended partition check box and then choose Auto (Register IPv4) or Manual.

You can choose the Public Key Algorithm and Digest Algorithm settings from the pull-down list. The default settings are RSA(2048bit) for Public Key Algorithm and SHA256 for Digest Algorithm.

Click Submit.

When the contents of the CSR appear, click Save to save the CSR file to your computer.

The CSR is created.

Note

Follow your CA policy regarding the method to send a CSR to your CA.

Page Top

How to install the certificate to your machine

When you receive the certificate from a CA, follow the steps below to install it into the scan server.

Note

Only a certificate issued with this machine’s CSR can be installed. When you want to create another CSR, make sure that the certificate is installed before creating another CSR. Create another CSR after installing the certificate to the machine. Otherwise the CSR you made before installing will be invalid.

1	Click Install Certificate on the Certificate page.
2	Specify the file of the certificate that has been issued by a CA, and then click Submit.
3	Now the certificate is created and saved in your machine memory successfully. To use SSL/TLS communication, the Root Certificate from the CA needs to be installed on your computer. Contact your network administrator about installation.

Page Top