Manage The Certificate Revocation List - NETGEAR SRX5308 Reference Manual

Manage the Certificate Revocation List

A Certificate Revocation List (CRL) file shows digital certificates that have been revoked and
are no longer valid. Each CA issues its own CRLs. It is important that you keep your CRLs
up-to-date. You should obtain the CRL for each CA regularly.

To view the currently loaded CRLs and upload a new CRL:
1. Select VPN > Certificates. The Certificates screen displays. The following figure shows
the bottom section of the screen with the Certificate Revocation Lists (CRL) table. There
is one example in the table.
Figure 150. Certificates, screen 3 of 3
The Certificate Revocation Lists (CRL) table lists the active CAs and their critical release
dates:
• CA Identify (Subject Name). The official name of the CA that issued the CRL.
• Last Update. The date when the CRL was released.
• Next Update. The date when the next CRL will be released.
2. In the Upload CRL section, click Browse and navigate to the CLR file that you previously
downloaded from a CA.
3. Click the Upload table button. If the verification process on the VPN firewall approves the
CRL, the CRL is added to the Certificate Revocation Lists (CRL) table.
Note: If the table already contains a CRL from the same CA, the old CRL
is deleted when you upload the new CRL.

To delete one or more CRLs:
1. In the Certificate Revocation Lists (CRL) table, select the check box to the left of the
CRL that you want to delete, or click the Select All table button to select all CRLs.
2. Click the Delete table button.
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Managing Users, Authentication, and Certificates
243