Edit My Certificates - ZyXEL Communications NWA Seres User Manual

Table 69 Configuration > Object > Certificate > My Certificates > Add (continued)
LABEL
Create a certification
request and enroll for
a certificate
immediately online
Enrollment Protocol
CA Server Address
CA Certificate
Request
Authentication
OK
Cancel
If you configured the Add My Certificates screen to have the Zyxel Device enroll a certificate and the
certificate enrollment is not successful, you see a screen with a Return button that takes you back to the
Add My Certificates screen. Click Return and check your information in the Add My Certificates screen.
Make sure that the certification authority information is correct and that your Internet connection is
working properly if you want the Zyxel Device to enroll a certificate online.

16.2.2 Edit My Certificates

Click Configuration > Object > Certificate > My Certificates and then the Edit icon to open the My
Certificate Edit screen. You can use this screen to view in-depth certificate information and change the
certificate's name.
Chapter 16 Certificates
DESCRIPTION
Select this to have the Zyxel Device generate a request for a certificate and apply to a
certification authority for a certificate.
You must have the certification authority's certificate already imported in the Trusted
Certificates screen.
When you select this option, you must select the certification authority's enrollment
protocol and the certification authority's certificate from the drop-down list boxes and
enter the certification authority's server address. You also need to fill in the Reference
Number and Key if the certification authority requires them.
This field applies when you select Create a certification request and enroll for a certificate
immediately online. Select the certification authority's enrollment protocol from the drop-
down list box.
Simple Certificate Enrollment Protocol (SCEP) is a TCP-based enrollment protocol that was
developed by VeriSign and Cisco.
Certificate Management Protocol (CMP) is a TCP-based enrollment protocol that was
developed by the Public Key Infrastructure X.509 working group of the Internet
Engineering Task Force (IETF) and is specified in RFC 2510.
This field applies when you select Create a certification request and enroll for a certificate
immediately online. Enter the IP address (or URL) of the certification authority server.
For a URL, you can use up to 511 of the following characters. a-zA-Z0-9'()+,/:.=?;!*#@$_%-
This field applies when you select Create a certification request and enroll for a certificate
immediately online. Select the certification authority's certificate from the CA Certificate
drop-down list box.
You must have the certification authority's certificate already imported in the Trusted
Certificates screen. Click Trusted CAs to go to the Trusted Certificates screen where you
can view (and manage) the Zyxel Device's list of certificates of trusted certification
authorities.
When you select Create a certification request and enroll for a certificate immediately
online, the certification authority may want you to include a reference number and key to
identify you when you send a certification request.
Fill in both the Reference Number and the Key fields if your certification authority uses the
CMP enrollment protocol. Just the Key field displays if your certification authority uses the
SCEP enrollment protocol.
For the reference number, use 0 to 99999999.
For the key, use up to 31 of the following characters. a-zA-Z0-9;|`~!@#$%^&*()_+\{}':,./
<>=-
Click OK to begin certificate or certification request generation.
Click Cancel to quit and return to the My Certificates screen.
NWA/WAC/WAX Series User's Guide
160