You are here: Preparing the Certification Authority > Defining Common Names in the Certificate

# Defining Common Names in the Certificate

The certificate generated by the CA includes Common Names (CNs) in the Subject field and the Subject Alternative Name field.

You can use these options in the profile to define the CNs in the generated certificate:

These fields are shown in each profile window that contains certificate-based authentication options (Remote Access, TLS, 802.1x, EAC).

Note:
These fields are not shown if you select the "Use certificate from file" option.

Default CNs

When you select Default CNs, the generated certificate will include these CNs:

- In the Subject field: DNS Host Name (FQDN)
- In the Subject Alternative Name field:
  - DNS Host Name (FQDN)
  - Host Name
  - SAM Account Name (Active Directory account name for the Intel AMT object)
  - User Principal Name
  - UUID of the Intel AMT system

User-defined CNs

This option lets you control which CNs will be included in the generated certificate, and which CN will be put in the Subject Name field.

Note:
Some servers require a specific CN in the Subject Name field: The Cisco* Access Control Server (ACS) requires the SAM Account Name The Funk* Odyssey* Server requires the Host Name

To define user-defined common names:

1. Select User-defined CNs.
2. Click Edit CNs. The Advanced Common Name window opens.

3. From the Available Common Names list, select the required CNs and click to add them to the Selected Common Names list. All the selected CNs will be put in the Subject Alternative Name field of the certificate.
4. From the drop-down list, select a CN (from the list of Selected Common Names). This CN will be put in the Subject Name field of the certificate (in addition to the Subject Alternative Name field).
5. Click OK. The Advanced Common Name window closes.