01-30-2011 04:57 AM
I have an SA-4000 running 6.5R8...the latest and greatest and it does not give the ability to create a 2048-bit CSR. I also have an SA-2500 running the same code and the option is there. I can only guess since the SA-4000 is EOL, the 2048-bit isn't an option. Since these models are FIPS compliant, you also cannot go with the OpenSSL option many others are stating here.
From the Admin guide:
NOTE: This option is not available on FIPS platforms as importing private keys is not supported. On a FIPS system, you can only create a CSR and then import a signed certificate from the CSR.
01-30-2011 08:46 AM
Updated on the SA-4000. I installed 7.0R4 and it allows for 2048-bit CSR to generate certificates. I used for GoDaddy wildcard cert and it worked fine.
02-04-2011 02:38 PM
Thanks for the update, trjones. I did confirm this as well that it was resolved in 7.0R3 and 7.1R1 for SA-4000FIPS and SA-6000FIPS compliant models.