Skip to content
Last update: 2021-10-15

Update the default CA

You can edit the default certificate authority.

To edit the default CA, do as follows:

  1. Go to Certificates > Certificate authorities and click the default CA (Default).

    You can't change the CA name.

  2. You can change the following attributes:

    Name Description
    Country name Country in which the device is deployed.
    State The state within the country.
    Locality name Name of the city.
    Organization name Name of the certificate owner.
    Example: Sophos Group
    Organization unit name Name of the department to which the certificate will be assigned.
    Example: Marketing
    Common name Common name or FQDN.
    Example: marketing.sophos.com
    Email address Contact person's email address.
    Private key password If a password was set for the CA, you can change it here.
    Key type Select from the following options:
    • RSA
    • Elliptic curve
    Key length If you've set the key type to RSA, select the key length. It's the number of bits used to construct the key.

    Larger keys offer greater security, but it takes longer to encrypt and decrypt data.
    Curve name If you've set the key type to Elliptic curve, select the curve name.
    Secure hash Select the algorithm from the list.
  3. Click Save.

Back to top