The My Certificates Add Screen - ZyXEL Communications ZyWall USG20-VPN User Manual

The following table describes the labels in this screen.
Table 218 Configuration > Object > Certificate > My Certificates
LABEL
PKI Storage
Space in Use
Add
Edit
Remove
Object References You cannot delete certificates that any of the USG's features are configured to use. Select
#
Name
Type
Subject
Issuer
Valid From
Valid To
Import
Refresh

29.10.3.1 The My Certificates Add Screen

Click Configuration > Object > Certificate > My Certificates and then the Add icon to open
the My Certificates Add screen. Use this screen to have the USG create a self-signed certificate,
enroll a certificate with a certification authority or generate a certification request.
Chapter 29 Object
DESCRIPTION
This bar displays the percentage of the USG's PKI storage space that is currently in use.
When the storage space is almost full, you should consider deleting expired or
unnecessary certificates before adding more certificates.
Click this to go to the screen where you can have the USG generate a certificate or a
certification request.
Double-click an entry or select it and click Edit to open a screen with an in-depth list of
information about the certificate.
The USG keeps all of your certificates unless you specifically delete them. Uploading a
new firmware or default configuration file does not delete your certificates. To remove an
entry, select it and click Remove. The USG confirms you want to remove it before doing
so. Subsequent certificates move up by one when you take this action.
an entry and click Object References to open a screen that shows which settings use
the entry.
This field displays the certificate index number. The certificates are listed in alphabetical
order.
This field displays the name used to identify this certificate. It is recommended that you
give each certificate a unique name.
This field displays what kind of certificate this is.
REQ represents a certification request and is not yet a valid certificate. Send a
certification request to a certification authority, which then issues a certificate. Use the
My Certificate Import screen to import the certificate and replace the request.
SELF represents a self-signed certificate.
CERT represents a certificate issued by a certification authority.
This field displays identifying information about the certificate's owner, such as CN
(Common Name), OU (Organizational Unit or department), O (Organization or company)
and C (Country). It is recommended that each certificate have unique subject
information.
This field displays identifying information about the certificate's issuing certification
authority, such as a common name, organizational unit or department, organization or
company and country. With self-signed certificates, this is the same information as in the
Subject field.
This field displays the date that the certificate becomes applicable.
This field displays the date that the certificate expires. The text displays in red and
includes an Expired! message if the certificate has expired.
Click Import to open a screen where you can save a certificate to the USG.
Click Refresh to display the current validity status of the certificates.
USG20(W)-VPN Series User's Guide
518