Ensure minimum private key size
Use a system property to determine the minimum size of the private key used for Certificate Signing Request (CSR) generation with the Certificate Inventory Management application.
The sn_disco_certmgmt.private_key_size system property determines the minimum size of the private key used for CSR generation with the Certificate Inventory Management application. Valid choices are 512, 1024, 2048, or 4096.
Verify that this property is set to a value of 2048 or higher. Valid choices for this property are 512, 1024, 2048, or 4096. If the property doesn’t exist in the System Properties [sys_properties] table, or the value is invalid, the value is 2048 by default.
More information
| Attribute | Description |
|---|---|
| Configuration name | sn_disco_certmgmt.private_key_size |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Integer, representing the size of the private key generated. Use values of 512, 1024, 2048, or 4096. |
| Recommended value | 2048 |
| Default value | 2048 |
| Fallback value | 2048 |
| Category | Communications |
| Security risk | - Severity score: 3.1 - CVSS score: Low - Security Risk: Using keys smaller than 2048 can result in future information disclosure in the event the key is brute forced. Use a valid value greater than or equal to 2048 to future proof the key for a longer time period. |
| Functional impact | Legacy systems and applications may not handle keys greater than or equal to 2048. |
| Dependencies and prerequisites | None |
To learn more about adding or creating a system property, see Add a system property.
Parent Topic:Configuration