Manage Vpn Ca Certificates - NETGEAR ProSafe FVS336Gv2 Reference Manual

ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
You can view loaded digital certificates, upload a new digital certificate, and generate a
certificate signing request (CSR). The VPN firewall typically holds two types of digital
certificates:
• CA certificates. Each CA issues its own digital certificate to validate communication with
the CA and to verify the validity of digital certificates that are signed by the CA.
• Self-signed certificates. The digital certificates that are issued to you by a CA to identify
your device.
On the VPN firewall, you can manage certificates through four tables:
• Trusted Certificates (CA Certificate) table. Contains the trusted digital certificates that
were issued by CAs and that you uploaded (see
page 514).
• Active Self Certificates table. Contains the self-signed certificates that were issued by
CAs and that you uploaded (see
• Self Certificate Requests table. Contains the self-signed certificate requests that you
generated. You might or might not have submitted these requests to CAs, and CAs might
or might not have issued digital certificates for these requests. Only the self-signed
certificates in the Active Self Certificates table are active on the VPN firewall (see
Manage VPN Self-Signed Certificates
• Certificate Revocation Lists (CRL) table. Contains the lists with digital certificates that
are revoked and no longer valid, that were issued by CAs, and that you uploaded. Note,
however, that the table displays only the active CAs and their critical release dates (see
Manage the VPN Certificate Revocation List

Manage VPN CA Certificates

The following sections provide information about managing VPN certification authority (CA)
certificates:
• Upload a CA Certificate
• Remove a CA Certificate
Upload a CA Certificate
The following procedure describes how to upload a CA certificate of a trusted CA on the VPN
firewall.

To upload a CA certificate of a trusted CA on the VPN firewall:
1. Download a digital certificate file from a trusted CA and store it on your computer.
2. On your computer, launch an Internet browser.
3. In the address field of your browser, enter the IP address that was assigned to the VPN
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
Manage VPN Self-Signed Certificates
on page 516).
Manage Users, Authentication, and VPN Certificates
514
Manage VPN CA Certificates
on page 522).
on
on page 516).