Appendix D. Certificate Settings For Ie6 And Ie7 - D-Link DSA-3600 User Manual

Appendix D. Certificate Settings for IE6 and IE7

Appendix D.
Certificate setting for the company with Certificate Authority
Background information
Any website or high-value Web Applications will require a client to access their websites via Secure Sockets
Layer (SSL). The browser will automatically ask for a public SSL certificate from the website and check if it is
valid. The public SSL Certificate consists of the public key and identity information which can be signed by any
established certificate authority (e.g. VeriSign). The certificate authority guarantees that the public key belongs
to the named entity. Usually, website's security certificate may encounter problem only if the security certificate
presented to the browser has not been signed by any certificate authority which can be trusted.
As long as the SSL function is enabled in the DSA-3600, there must be a public SSL certificate signed by an
established certificate authority. To avoid the error message in the browser, a company should have its own
Certificate Authority (CA). The IT department must therefore install the SSL certificate for each normal user
when deploying the DSA-3600.
Secure Certificate setting for both IE6 and IE7
For the company with its own Certificate Authority (CA), the certificate of the company should be trusted by all
his employees' computers, and the certificate should be delivered through a trusted media. For example, the
MIS staff should install the CA certificate in each computer. The company CA will issue a certificate for the
DSA-3600 and export it to the DSA-3600.
Note: If the DSA-3600 is installed in a company, the administrator can create a certificate using a software
instead of purchasing a public trusted certificate.
Certificate setting for the company without Certificate Authority
For a company that does not have it own Certificate Authority (CA), the administrators should first apply for a
trusted certificate, or create one using a certificate software. Second, the administrators should use some
trusted media to install this certificate (as trusted CA) in each employee's computer, and in the meantime
export this certificate to the DSA-3600.
In some circumstance, the company without Certificate Authority may follow the steps stated below to avoid
error message. When in the LAN environment of the office instead of a wireless environment, administrators
may already have recognized certificates in the system which the CA must be verified as secured.
Certificate Settings for IE6 and IE7
116