Digi Connect WAN Series User Manual page 150

Digi Connect WAN Family web interface
About Simple Certificate Enrollment Protocol (SCEP) CA certificates
Managing Simple Certificate Enrollment Protocol (SCEP) CA certificates involves two types of
certificates and settings on several pages:
The SCEP CA certificate. This is the globally trusted certificate.
n
The VPN identity certificate; that is, the certificate that identifies the particular device.
n
The process for managing these two types of certificates is as follows:
Step
1. Get the SCEP CA certificate.
2. Accept the SCEP CA certificates.
3. Enroll the VPN identity
certificate.
4. Verify enrollment of the VPN
identity certificate.
Installed Certificate Authority Certificates
The table lists any certificate authority certificates that are loaded in the Certificate Authority
database.
Action: Select to perform allowable actions on the entry. The only allowable action is to delete
n
the entry.
Subject: The entity that received the certificate. This is expressed as the value entered in a
n
browser's URL field; typically a Fully Qualified Domain Name (FDQN) if using DNS or an IP
address.
Issuer: The entity that issued the certificate.
n
Expiration: The expiration date of the certificate.
n
Delete button: Click to delete the CA certificates selected in the Action column from the
n
database.
Digi Connect WAN Family User Guide
Location in X.509 Certificate and Key Management
settings
Certificate Authorities (CAs) / Certificate Revocation Lists
(CRLs) > Obtain CA certificates from a SCEP Server fields
and Get CA button
See Obtain CA certificates from a SCEP
Certificate Authorities (CAs) / Certificate Revocation Lists
(CRLs) >
Installed SCEP Certificate Authority Certificates
See Installed Certificate Authority
Virtual Private Network (VPN) Identities >
Key Generation / Enrollment fields and Enroll button
This step moves the VPN identity certificate into the pending
enrollment database, which is the database that indicates
which certificate enrollment requests are outstanding.
See Key generation / enrollment.
Virtual Private Network (VPN) Identities >
Installed VPN Identity Certificates
The VPN identity certificate is automatically added when it
comes back from the SCEP server. Verify that it is in the table.
See Installed VPN identity
Administration
Server.
Certificates.
certificates.
150