Table of Contents
Advertisement
Chapter 4
A certificate entry can be a normal certificate or a Certificate Signing Request (CSR). CSRs
cannot be used for normal operation and can only be downloaded in order to be signed by
a CA. Once the CA has signed the CSR, the resulting certificate can be added to the system
and used.
For each entry, you can download the certificate (or certificate signing request) as well as
the corresponding key by clicking on the Download field. If there is no key available for a
given certificate, the key download table cell will be empty.
Once all modifications have been done, click the Submit button to submit the changed list.
To discard your changes and return to the previous settings (before you click Submit),
click the Reset button. Click the red x icon to delete one or more certificates.
4.1.6.2
Creating a Certificate
When creating a certificate, you need to select the type of certificate you want to create and
how to sign the certificate. For HTTPS, an HTTPS certificate must be issued.
The CA Certificates are always self-signed. All other certificates can be self-signed, or
signed by another certificate. If signed by another certificate, the other certificate can either
be a local certificate (listed in the drop-down box of CA certificates to use when signing the
certificate), or an external certificate in which case a Certificate Signing Request (CSR)
must be created.
To create a certificate, configure the following settings in the Create a Certificate section of
the SSL/TLS Certificate Store page. When you are finished, click the Create Certificate
button.
VPN Concentrator Installation and Configuration Guide
Figure 4-15 Downloading a Certificate
WARNING
Creating a certificate may require a lot of CPU resources and should
not be done while the system is in service.
Configuring the VPN Concentrator
43
Hide quick links:
Advertisement
Table of Contents
