Justin,
These are public key cryptography algorithms. RSA (Rivest-Shamir-Adleman)
and Elliptic Curve Digital Signature Algorithm (ECDSA).
Which one you choose depends on how secure you want to encrypted connection
and what type algorithms the devices that connect to you IBM I server
support.
Common choices today are RSA 2048, RSA 4096, and ECDSA 256. The most common
is probably RSA 2048.
ECDSA is newer than RSA but may not be supported by all other devices
I would say the only bad choice in the list is RSA 1024.
Note you can always create a new key in the future with a different
Algorithm. In fact, most keys only last on year.
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Justin
Taylor
Sent: Tuesday, April 9, 2024 7:41 AM
To: MIDRANGE-L <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: DCM Key for CSR
In DCM, when generating a certificate request, it asks for "Key Algorithm
and Size" with these options:
RSA 1024
RSA 2048
RSA 4096
ECDSA 256
ECDSA 384
ECDSA 521
I'm trying to figure out what that really means. Can anybody point me in
the right direction?
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.
.
midrange.com
