Advantages Of Certificates; Self-Signed Certificates; Verifying A Certificate; Checking The Fingerprint Of A Certificate On Your Computer - ZyXEL Communications P-660HWP-D1 User Manual

Chapter 13 Certificates
Certification authorities maintain directory servers with databases of valid and revoked
certificates. A directory of certificates that have been revoked before the scheduled expiration
is called a CRL (Certificate Revocation List). The P-660HWP-D1 can check a peer's
certificate against a directory server's list of revoked certificates. The framework of servers,
software, procedures and policies that handles keys is called PKI (public-key infrastructure).

13.1.1 Advantages of Certificates

Certificates offer the following benefits.
• The P-660HWP-D1 only has to store the certificates of the certification authorities that
you decide to trust, no matter how many devices you need to authenticate.
• Key distribution is simple and very secure since you can freely distribute public keys and
you never need to transmit private keys.

13.2 Self-signed Certificates

You can have the P-660HWP-D1 act as a certification authority and sign its own certificates.

13.3 Verifying a Certificate

Before you import a trusted CA or trusted remote host certificate into the P-660HWP-D1, you
should verify that you have the actual certificate. This is especially true of trusted CA
certificates since the P-660HWP-D1 also trusts any valid certificate signed by any of the
imported trusted CA certificates.

13.3.1 Checking the Fingerprint of a Certificate on Your Computer

A certificate's fingerprints are message digests calculated using the MD5 or SHA1 algorithms.
The following procedure describes how to check a certificate's fingerprint to verify that you
have the actual certificate.
1 Browse to where you have the certificate saved on your computer.
2 Make sure that the certificate has a ".cer" or ".crt" file name extension.

Figure 106 Certificates on Your Computer

3 Double-click the certificate's icon to open the Certificate window. Click the Details tab
and scroll down to the Thumbprint Algorithm and Thumbprint fields.
188
P-660HWP-D1 User's Guide