Directory Servers - ZyXEL Communications P-662H-61 User Manual

Chapter 17 Certificates
Table 109 Trusted Remote Host Details (continued)
LABEL
MD5 Fingerprint
SHA1 Fingerprint
Certificate in PEM
(Base-64) Encoded
Format
Back
Export
Apply
Cancel

17.15 Directory Servers

Click Security > Certificates > Directory Servers to open the Directory Servers screen.
This screen displays a summary list of directory servers (that contain lists of valid and revoked
certificates) that have been saved into the ZyXEL Device. If you decide to have the ZyXEL
Device check incoming certificates against the issuing certification authority's list of revoked
certificates, the ZyXEL Device first checks the server(s) listed in the CRL Distribution
Points field of the incoming certificate. If the certificate does not list a server or the listed
server is not available, the ZyXEL Device checks the servers listed here.
268
DESCRIPTION
This is the certificate's message digest that the ZyXEL Device calculated using
the MD5 algorithm. You cannot use this value to verify that this is the remote
host's actual certificate because the ZyXEL Device has signed the certificate;
thus causing this value to be different from that of the remote hosts actual
certificate. See Section 17.12 on page 264
certificate.
This is the certificate's message digest that the ZyXEL Device calculated using
the SHA1 algorithm. You cannot use this value to verify that this is the remote
host's actual certificate because the ZyXEL Device has signed the certificate;
thus causing this value to be different from that of the remote hosts actual
certificate. See Section 17.12 on page 264
certificate.
This read-only text box displays the certificate or certification request in Privacy
Enhanced Mail (PEM) format. PEM uses 64 ASCII characters to convert the
binary certificate into a printable form.
You can copy and paste the certificate into an e-mail to send to friends or
colleagues or you can copy and paste the certificate into a text editor and save
the file on a management computer for later distribution (via floppy disk for
example).
Click Back to return to the previous screen.
Click this button and then Save in the File Download screen. The Save As
screen opens, browse to the location that you want to use and click Save.
Click Apply to save your changes back to the ZyXEL Device. You can only
change the name of the certificate.
Click Cancel to quit configuring this screen and return to the Trusted Remote
Hosts screen.
for how to verify a remote host's
for how to verify a remote host's
P-662H/HW-D Series User's Guide