Pls help me filling out the Default CA for remote-access SSL VPN !?

Is your firewall registered? 

And what do you have here: https://www.sophos.com/en-us/mysophos/my-account/network-protection/contact-information

Any special characters used on this website? 

Thanks for your reply. As these information are sensitive, I have just sent it to you in private. Pls check your inbox for my message. 

Thank you very much for your time and caring.

Essentially the issue occur due the case of missing information in contact information. You need to fill out those information on the website with your address etc. 

This will help for the next time - For this appliance, you need to fill out your information as well as a Private Key Passphrase, which is not needed for anything else. So you can simply leave everything as it is - Fill out your contact information and hit save. 

Hi J Thai

When you update the default CA, it's automatically regenerated.

If a CA expires or is compromised, you can regenerate it.

To regenerate a CA, do as follows:

1. Go to Certificates > Certificate authorities.

2. To regenerate the default certificate, go to the Manage column and click Regenerate certificate .

Thanks and Regards

Thanks for your advice. I myself do not own a web domain. What else can I fill in the Common Name field ?

Common Name is the hostname of the appliance. This can be a hostname or a FQDN. You do not need to own a domain for that. Hostname is fine. 

Can I use the serial number of my license as the hostname then ? 

Hi J Thai 

By default, on Sophos firewall, the Common Name filled  with an Appliance key like "Default_CA_Appliancekey"

Also, you can go to System -->Administration -->Admin and User Settings, you can use the same hostname you have set on the firewall.

Thanks and Regards

Hello buddy, thanks for your reply.

Here is my Appliance Certificate:

Here is my system's host name, which also happens to be the serial number in my license:

So what to do with my blank Default CA now ? Which information should I be inputting into it, particularly the 'Common Name' field ?

Hi  J Thai 

Yes, you can fill as per the hostname like "Default_CA_serial number" as a common name field 

For more information check : https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Certificates/CertificateAuthorities/CertificatesDefaultCAUpdate/index.html 

Regards