Digi Connect WAN Series User Manual page 147

Digi Connect WAN Family web interface
Simple Certificate Enrollment Protocol (SCEP)—Use SCEP to obtain certificates used in
n
Virtual Private Networking (VPN) security. Large enterprises use SCEP. SCEP allows for
provisioning from the field.
VPN—Use the IPsec protocol in VPN to securely connect a device to a network, connect two
n
networks together, and allow a device to perform proxy VPN.
Secure Socket Layer (SSL)/Transport Layer Security (TLS)—Use SSL and TLS security to
n
secure access to web pages for configuration purposes, secure serial port connections, and SSL
autoconnect, an automatic connection (autoconnection) between a serial port on the device
and a remote network destination.
Secure Shell (SSHv2)—Use SSHv2 to secure access to a device's console and serial ports for
n
configuration purposes.
Benefits of certificates
You gain the following benefits when you use certificates to manage security:
Certificates are more secure than Digi self-signed certificates.
n
Certificate management allows you to push your own certificates out to Digi device.
n
The key sizes are more flexible.
n
When you manage certificates through the web interface, it creates a repository of certificates
n
that other applications and processes can use.
Additional information on certificate management
Implementing certificate management requires selecting a security type and understanding its
technical details and key operations. If you are tasked with certificate management for your
organization and need more background information, a good place to start is Wikipedia articles for the
security types (X.509 CA/CRL, SCEP, VPN, SSL/TLS), and SSH). These articles reference resources such
as standards, Request For Comments pages (RFCs), and articles that provide more technical detail.
Tables managed by the X.509 Certificate/Key Management feature
Certificate and key management information is stored in the following database tables:
Digi Connect WAN Family User Guide
Administration
147