ZyXEL Communications NWA3560-N User Manual page 164

Chapter 14 Certificates
Table 63 Configurat ion > Obj ect > Cert ificat e > My Cert ificat es > Add ( cont inued)
LABEL
Creat e a cert ificat ion
request and enroll for
a cert ificat e
im m ediat ely online
Enrollm ent Prot ocol
CA Server Address
CA Cert ificat e
Request
Aut hent icat ion
OK
Cancel
I f you configured t he M y Ce r t ifica t e Cr e a t e screen t o have t he device enroll a cert ificat e and t he
cert ificat e enrollm ent is not successful, you see a screen wit h a Re t ur n but t on t hat t akes you back
t o t he M y Ce r t ifica t e Cr e a t e screen. Click Re t ur n and check your inform at ion in t he M y
Ce r t ifica t e Cr e a t e screen. Make sure t hat t he cert ificat ion aut horit y inform at ion is correct and t hat
your I nt ernet connect ion is working properly if you want t he device t o enroll a cert ificat e online.
164
DESCRIPTION
Select t his t o have t he device generat e a request for a cert ificat e and apply
t o a cert ificat ion aut horit y for a cert ificat e.
You m ust have t he cert ificat ion aut horit y's cert ificat e already im port ed in t he
Tr u st e d Ce r t ifica t e s screen.
When you select t his opt ion, you m ust select t he cert ificat ion aut horit y's
enrollm ent prot ocol and t he cert ificat ion aut horit y's cert ificat e from t he drop-
down list boxes and ent er t he cert ificat ion aut horit y's server address. You
also need t o fill in t he Re fe r e n ce N u m be r and Ke y if t he cert ificat ion
aut horit y requires t hem .
This field applies when you select Cr e a t e a ce r t ifica t ion r e qu e st a nd
e n r oll for a ce r t ifica t e im m e dia t e ly on lin e . Select t he cert ificat ion
aut horit y's enrollm ent prot ocol from t he drop- down list box.
Sim ple Ce r t ifica t e En r ollm e n t Pr ot ocol ( SCEP) is a TCP- based
enrollm ent prot ocol t hat was developed by VeriSign and Cisco.
Ce r t ifica t e M a n a ge m e n t Pr ot ocol ( CM P) is a TCP- based enrollm ent
prot ocol t hat was developed by t he Public Key I nfrast ruct ure X.509 working
group of t he I nt ernet Engineering Task Force ( I ETF) and is specified in RFC
2510.
This field applies when you select Cr e a t e a ce r t ifica t ion r e qu e st a nd
e n r oll for a ce r t ifica t e im m e dia t e ly on lin e . Ent er t he I P address ( or URL)
of t he cert ificat ion aut horit y server.
For a URL, you can use up t o 511 of t he following charact ers. a- zA- Z0- 9'( ) + ,/
: .= ?; ! * # @$_% -
This field applies when you select Cr e a t e a ce r t ifica t ion r e qu e st a nd
e n r oll for a ce r t ifica t e im m e dia t e ly on lin e . Select t he cert ificat ion
aut horit y's cert ificat e from t he CA Ce r t ifica t e drop- down list box.
You m ust have t he cert ificat ion aut horit y's cert ificat e already im port ed in t he
Tr u st e d Ce r t ifica t e s screen. Click Tr ust e d CAs t o go t o t he Tr u st e d
Ce r t ifica t e s screen where you can view ( and m anage) t he device's list of
cert ificat es of t rust ed cert ificat ion aut horit ies.
When you select Cr e a t e a ce r t ifica t ion r e qu e st a n d e n r oll for a
ce r t ifica t e im m e dia t e ly on lin e , t he cert ificat ion aut horit y m ay want you
t o include a reference num ber and key t o ident ify you when you send a
cert ificat ion request .
Fill in bot h t he Re fe r e n ce N u m be r and t he Ke y fields if your cert ificat ion
aut horit y uses t he CMP enrollm ent prot ocol. Just t he Ke y field displays if
your cert ificat ion aut horit y uses t he SCEP enrollm ent prot ocol.
For t he reference num ber, use 0 t o 99999999.
For t he key, use up t o 31 of t he following charact ers. a- zA- Z0-
9; | ` ~ ! @# $% ^ &* ( ) _+ \ { } ': ,./ < > = -
Click OK t o begin cert ificat e or cert ificat ion request generat ion.
Click Ca n ce l t o quit and ret urn t o t he M y Ce r t ifica t e s screen.
NWA3000-N Series User's Guide