Downloading The Certificate; Using Certificates On The Firebox X Edge; Importing A Certificate; Removing A Certificate - Watchguard Firebox X20E User Manual

Using Certificates on the Firebox X Edge

Downloading the certificate

Open your web browser. In the location or address bar, type the IP address of the server where
1
the Certification Authority is installed, followed by certsrv.
Example: http://10.0.2.80/certsrv
Click the View the status of a pending certificate request link.
2
Click the certificate request with the time and date you submitted.
3
Select the Base 64 encoded radio button to choose the PKCS7 format.
4
Click Download certificate to save the certificate on your hard drive.
5
Using Certificates on the Firebox X Edge
You must import a certificate to make it active. If you plan to use a certificate for VPN authentication on
an existing tunnel, you must also change the VPN tunnel configuration to use the new certificate. No
additional configuration is necessary for Trusted CA certificates.
Local certificates must include an unencrypted private key in the certificate file to operate correctly.

Importing a certificate

From the System Status page on the Firebox X Edge, select Administration > Certificates.
1
Adjacent to the type of certificate you want to add, click Import.
2
If your certificate is in the PEM format, copy and paste the certificate contents into the text box,
3
or select the second radio button and click Browse to select the certificate file.
If your certificate is in the PKCS12 format, select the last radio button and click Browse to select
4
the certificate file.
This option is available only for Local Firebox X Edge certificates.
Click Import.
5
You can repeat steps 2-5 to add more certificates.
Using a local certificate
From the System Status page on the Firebox X Edge, select Administration > System Security.
1
Select the local certificate you imported from the Certificate drop-down list.
2
Click Submit.
3

Removing a certificate

From the System Status page on the Firebox X Edge, select Administration > Certificates.
1
Select the certificate you want to delete, and then click the adjacent Remove button.
2
VPN tunnels do not operate correctly if you remove a certificate that is currently in use. We recommend
that you change the VPN tunnel authentication method before you remove a Remote VPN Gateway
certificate.
152 Firebox X Edge e-Series