Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

We have a Cisco 3000 VPN concentrator and use the Cisco VPN client to generate certificate requests, which we then create/authenticate on our certificate server.

When the help desk generates the request, they sometimes email that to me, then I generate the certificate on the server. Does the request need to be encrypted? Until the certificate gets generated is there something in the request itself that would need to remain secret?

Thank you.

share|improve this question

1 Answer 1

up vote 4 down vote accepted

No, the certificate signing request does not need to be encrypted, the certificate itself doesn't need to be encrypted. Only the private key associated with the CSR/CERT needs to be protected, and that should never be transmitted to another host.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.