EX SSL-VPN: Support Certificate authentication for the client certificate where key size > 4096

Description

EX SSL-VPN: Support Certificate authentication for the client certificate where key size > 4096

Resolution

Question:

Do we support client certificate authentication for Certificates created with Key Size >4096?

Details:

We currently support Client certificates of Key Size < 2048. Authentication using certificates with larger Key size might fail with error messages "ssl_error_illegal_parameter_alert" (or) "SSL connection error" depending on the browser used for the SSL Connection.

We have plans to support such large key size based client certificates in our upcoming 11.x firmware release (Feature Request CLIC#1657). For more details, please contact SonicWall Support.


Tracking ID: 142116, 1657

Related Articles

  • SMA1000: How to Enable 10Gb SPF+ Interfaces on SMA7210
    Read More
  • SMA1000: Default Port and URL Requirements
    Read More
  • SMA1000: Impact of Windows RDP Security Update (April 2026)
    Read More
not finding your answers?