Ensure minimum private key size

Use a system property to determine the minimum size of the private key used for Certificate Signing Request (CSR) generation with the Certificate Inventory Management application.

The sn_disco_certmgmt.private_key_size system property determines the minimum size of the private key used for CSR generation with the Certificate Inventory Management application. Valid choices are 512, 1024, 2048, or 4096.

Verify that this property is set to a value of 2048 or higher. Valid choices for this property are 512, 1024, 2048, or 4096. If the property doesn’t exist in the System Properties [sys_properties] table, or the value is invalid, the value is 2048 by default.

More information

Attribute	Description
Configuration name	sn_disco_certmgmt.private_key_size
Configuration type	System Properties (/sys_properties_list.do)
Data type	Integer, representing the size of the private key generated. Use values of 512, 1024, 2048, or 4096.
Recommended value	2048
Default value	2048
Fallback value	2048
Category	Communications
Security risk	Severity score: 3.1 CVSS score: Low Security Risk: Using keys smaller than 2048 can result in future information disclosure in the event the key is brute forced. Use a valid value greater than or equal to 2048 to future proof the key for a longer time period.
Functional impact	Legacy systems and applications may not handle keys greater than or equal to 2048.
Dependencies and prerequisites	None

To learn more about adding or creating a system property, see Add a system property.