To install the IGEL Cloud Gateway (ICG), you must provide a signed certificate. In order to generate a signed certificate, a root certificate must be generated first.
With UMS 6.03 or higher, you can use the ICG remote installer for creating certificates. This procedure is described here. For the procedure with UMS 6.02 or lower, see the how-to Creating Certificates from an Existing Root Certificate (UMS 6.02 or Older).
Creating the Root Certificate
- In the UMS Console, go to UMS Administration > UMS Network > Igel Cloud Gateway.
- In the toolbar in the upper right, click the icon (Install new IGEL Cloud Gateway).
- The ICG remote installer opens. Any existing ICG certificates are shown in the Certificates area.
- Click to generate a root certificate.
- Fill in the certificate fields:
- Displayname: Name for the certificate; free text entry
- Your organization: Organization or company name
- Your city or locality: Location
- Your two-letter country code: ISO 3166 country code, e.g.
Valid until: Local date on which the certificate expires. (Default: 10 years from now)
Make sure to define a long duration for the root certificate; 10 years or more are highly recommended. When the root certificate expires, all devices connected to the ICG must be registered again.
A key pair and a certificate are generated.Generating keys may take substantial time on virtual machines (VMs), as these do not have a powerful (pseudo) random number source. On Linux VMs this can be improved by installing the haveged package.
The CA is now ready to use.
The CA's root certificate appears on the list.
Creating the Signed Certificate