Using [Digital Signature Method] for authentication
Select [Digital Signature Method] for [AUTH Method] and click [Key and Certificate].
Select the key pair you want to use, and click [Default Key Settings].
Viewing details of a key pair or certificate
You can check the details of the certificate or verify the certificate by clicking the corresponding text
link under [Key Name], or the certificate icon.
Specify the IPSec Network Settings.
Select the check box to enable Perfect Forward Secrecy (PFS) for IPSec session keys. Enabling PFS enhances
the security while increasing the load on the communication. Make sure that PFS is also enabled for the other
devices. When not using PFS, clear the check box.
Verifying Key Pairs and Digital Certificates(P. 322)