ZyXEL Communications NWA3560-N User Manual page 171

The following t able describes t he labels in t his screen.
Table 67 Configurat ion > Obj ect > Cert ificat e > Trust ed Cert ificat es > Edit
LABEL
Nam e
Cert ificat ion Pat h
Refresh
Enable X.509v3 CRL
Dist ribut ion Point s
and OCSP checking
OCSP Server
URL
I D
Password
LDAP Server
Address
Port
I D
Password
Cert ificat e
I nform at ion
Type
Version
Serial Num ber
Subj ect
NWA3000-N Series User's Guide
DESCRIPTION
This field displays t he ident ifying nam e of t his cert ificat e. You can change t he
nam e. You can use up t o 31 alphanum eric and ; '~ ! @# $% ^ &( ) _+ [ ] { } ',.= -
charact ers.
Click t he Re fr e sh but t on t o have t his read- only t ext box display t he end
ent it y's cert ificat e and a list of cert ificat ion aut horit y cert ificat es t hat shows
t he hierarchy of cert ificat ion aut horit ies t hat validat e t he end ent it y's
cert ificat e. I f t he issuing cert ificat ion aut horit y is one t hat you have im port ed
as a t rust ed cert ificat e, it m ay be t he only cert ificat ion aut horit y in t he list
( along wit h t he end ent it y's own cert ificat e) . The device does not t rust t he end
ent it y's cert ificat e and displays " Not t rust ed" in t his field if any cert ificat e on
t he pat h has expired or been revoked.
Click Re fr e sh t o display t he cert ificat ion pat h.
Select t his check box t o have t he device check incom ing cert ificat es t hat are
signed by t his cert ificat e against a Cert ificat e Revocat ion List ( CRL) or an OCSP
server. You also need t o configure t he OSCP or LDAP server det ails.
Select t his check box if t he direct ory server uses OCSP ( Online Cert ificat e
St at us Prot ocol) .
Type t he prot ocol, I P address and pat hnam e of t he OCSP server.
The device m ay need t o aut hent icat e it self in order t o assess t he OCSP server.
Type t he login nam e ( up t o 31 ASCI I charact ers) from t he ent it y m aint aining
t he server ( usually a cert ificat ion aut horit y) .
Type t he password ( up t o 31 ASCI I charact ers) from t he ent it y m aint aining t he
OCSP server ( usually a cert ificat ion aut horit y) .
Select t his check box if t he direct ory server uses LDAP ( Light weight Direct ory
Access Prot ocol) . LDAP is a prot ocol over TCP t hat specifies how client s access
direct ories of cert ificat es and list s of revoked cert ificat es.
Type t he I P address ( in dot t ed decim al not at ion) of t he direct ory server.
Use t his field t o specify t he LDAP server port num ber. You m ust use t he sam e
server port num ber t hat t he direct ory server uses. 389 is t he default server
port num ber for LDAP .
The device m ay need t o aut hent icat e it self in order t o assess t he CRL direct ory
server. Type t he login nam e ( up t o 31 ASCI I charact ers) from t he ent it y
m aint aining t he server ( usually a cert ificat ion aut horit y) .
Type t he password ( up t o 31 ASCI I charact ers) from t he ent it y m aint aining t he
CRL direct ory server ( usually a cert ificat ion aut horit y) .
These read- only fields display det ailed inform at ion about t he cert ificat e.
This field displays general inform at ion about t he cert ificat e. CA- signed m eans
t hat a Cert ificat ion Aut horit y signed t he cert ificat e. Self- signed m eans t hat t he
cert ificat e's owner signed t he cert ificat e ( not a cert ificat ion aut horit y) . X.509
m eans t hat t his cert ificat e was creat ed and signed according t o t he I TU-T
X.509 recom m endat ion t hat defines t he form at s for public- key cert ificat es.
This field displays t he X.509 version num ber.
This field displays t he cert ificat e's ident ificat ion num ber given by t he
cert ificat ion aut horit y.
This field displays inform at ion t hat ident ifies t he owner of t he cert ificat e, such
as Com m on Nam e ( CN) , Organizat ional Unit ( OU) , Organizat ion ( O) and
Count ry ( C) .
Chapter 14 Certificates
171