@@ -155,26 +155,28 @@ For the first step we enter:
155
155
156
156
================== ==============================================
157
157
**Username ** *Donald *
158
- **Password ** (2x) *S3cr3tP@ssw0rd *
159
- **Full name ** *Donald Duck *
160
- **Certificate ** *Check “Click to create a user certificate” *
158
+ **Password ** *Choose a strong password *
159
+ **Full name ** *Donald *
161
160
**OTP seed ** *Check “Generate new secret” *
162
161
================== ==============================================
163
162
164
- Click **Save ** and you will be redirected to create the User Certificate.
165
- Fill in the Certificate form with the following for our example (leave anything
166
- not listed on its presented defaults):
163
+ After pressing **Save **, click on the button ``Search certificates by username ``
164
+ in the same row as the created user to be redirected to the certificate page. Press
165
+ *+ * to create a new certificate with the common name of this user.
166
+ Fill in the certificate form with the following (leave anything
167
+ not listed on default):
167
168
168
169
=========================== ========================================
169
170
**Method ** *Create an internal Certificate *
170
- **Descriptive Name ** *Leave default (Donald) *
171
- **Certificate authority ** *SSL VPN CA *
171
+ **Descriptive Name ** *Donald *
172
172
**Type ** *Client Certificate *
173
- **Key length ** * 4096 *
173
+ **Key type ** * RSA- 4096 *
174
174
**Digest Algorithm ** *SHA512 *
175
+ **Issuer ** *SSL VPN CA *
176
+ **Common Name ** *Donald *
175
177
=========================== ========================================
176
178
177
- Click **Save ** and you will be redirected to the User page.
179
+ Click **Save ** and go back to the user page.
178
180
Now we will activate your newly created seed with your Google Authenticator
179
181
compatible app. To do so click in the **Click to unhide ** button in the
180
182
**OTP QR code ** row and you will get a QR code to scan with your smartphone.
@@ -183,7 +185,7 @@ See also: :doc:`/manual/how-tos/two_factor`
183
185
184
186
.. Note ::
185
187
186
- Always make sure to use the same **Certificate authority ** as the certificate authority created earlier, as
188
+ Always make sure to use the same **Issuer ** as the certificate authority created earlier, as
187
189
this links the clients / users to the correct openvpn server.
188
190
189
191
-----------------------------
0 commit comments