Manage The Certificate Revocation List - NETGEAR UTM9S Reference Manual

Manage the Certificate Revocation List

A Certificate Revocation List (CRL) file shows digital certificates that have been revoked and
are no longer valid. Each CA issues its own CRLs. It is important that you keep your CRLs
up-to-date. You should obtain the CRL for each CA regularly.

To view the currently loaded CRLs and upload a new CRL:
1. Select VPN > Certificates. The Certificates screen displays. The following figure shows
the bottom section of the screen with the Certificate Revocation Lists (CRL) table.
(There is one example in the table.)
Figure 238. Certificates, screen 3 of 3
The Certificate Revocation Lists (CRL) table lists the active CAs and their critical release
dates:
• CA Identity. The official name of the CA that issued the CRL.
• Last Update. The date when the CRL was released.
• Next Update. The date when the next CRL will be released.
2. In the Upload CRL section, click the Browse button and navigate to the CLR file that you
previously downloaded from a CA.
3. Click the Upload table button. If the verification process on the UTM approves the CRL, the
CRL is added to the Certificate Revocation Lists (CRL) table.
Note: If the table already contains a CRL from the same CA, the old CRL
is deleted when you upload the new CRL.

To delete one or more CRLs:
1. In the Certificate Revocation Lists (CRL) table, select the check box to the left of each
CRL that you want to delete, or click the Select All table button to select all CRLs.
2. Click the Delete table button.
ProSecure Unified Threat Management (UTM) Appliance
Managing Users, Authentication, and VPN Certificates
388