Certificate Usage - Alvarion BreezeACCESS Wi2 System Manual

NOTE
When a web browser connects to the AP using SSL, the AP sends only its own SSL certificate to
the browser. This means that if the certificate has been signed by an intermediate certificate
authority, and if the web browser only knows about the root certificate authority that signed the
public key certificate of the intermediate certificate authority, the web browser does not get the
whole certificate chain it needs to validate the identity of the AP. Consequently, the web browser
issues security warnings. To avoid this problem, install an SSL certificate on the AP only if it is
directly signed by the root certificate authority or if you have appended all certificates that make up
the chain.
Consequently, the web browser issues security warnings.
To avoid this problem, make sure that you install the entire certificate chain when you install a new
certificate on the AP.
NOTE
An SNMP trap is sent to let you know when the AP's SSL certificate is about to expire if you enable
the Traps option on the Management > SNMP page and then click Configure traps and enable
the Certificate about to expire trap option under Maintenance.
9.2.5

Certificate Usage

To see the services that are associated with each certificate, select Security > Certificate usage.
With the factory default certificates installed, the page will look like this:
9.2.5.1 Service
Name of the service that is using the certificate. To view detailed information on the certificate
select the service name.
9.2.5.2 Authenticate to Peer Using
Name of the certificate and private key. The AP is able to prove that it has the private key
corresponding to the public key in the certificate. This is what establishes the AP as a legitimate user
of the certificate.
9.2.5.3 Number of Associated CAs
Number of CA certificates used by the service.
BreezeMAX Wi² and BreezeACCESS Wi² System Manual
.
Figure 9-4: Certificate Usage
Managing Certificates
165