Draytek Vigor2136 Series User Manual page 164

Apply Save the current settings and exit the page.
After finishing this web page configuration, please click Apply to save the settings.
II-1-18-2 Trusted CA
The user can build RootCA certificates (up to three) if required.
Trusted CA certificate lists three sets of trusted CA certificate. In addition, you can build a RootCA
certificate if required.
When the local client and remote client are required to make certificate authentication (e.g., IPsec
X.509) for data passing through SSL tunnel and avoiding the attack of MITM, a trusted root
certificate authority (Root CA) will be used to authenticate the digital certificates offered by both
ends.
However, the procedure of applying digital certificate from a trusted root certificate authority is
complicated and time-consuming. Therefore, Vigor router offers a mechanism which allows you to
generate root CA to save time and provide convenience for general user. Later, such root CA
generated by DrayTek server can perform the issuing of local certificate.
To import a RootCA to the Vigor router, click +Add to upload one certificate.
154