Issue The Certificate; Download The Certificate; About Using Certificates On The Firebox X Edge; Import A Certificate - Watchguard Firebox X15 User Manual

Issue the certificate

1. Connect to the server where the Certification Authority is installed, if necessary.
2. From the Start Menu, select Control Panel > Administrative Tools > Certification Authority.
3. From the Certification Authority (Local) tree in the left navigation pane, select Your Domain Name
> Pending Requests.
4. Select the CSR in the right navigation pane.
5. From the Action menu, select All Tasks > Issue.
6. Close the Certification Authority window.

Download the certificate

1. Open your web browser. In the location or address bar, type the IP address of the server where the
Certification Authority is installed, followed by certsrv.
Example: http://10.0.2.80/certsrv
2. Click the View the status of a pending certificate request link.
3. Click the certificate request with the time and date you submitted.
4. Select the Base 64 encoded radio button to choose the PKCS7 format.
5. Click Download certificate to save the certificate on your hard drive.

About using certificates on the Firebox X Edge

You must import a certificate to make it active. If you plan to use a certificate for VPN authentication on an
existing tunnel, you must also change the VPN tunnel configuration to use the new certificate. No additional
configuration is necessary for Trusted CA certificates.
Local certificates must include an unencrypted private key in the certificate file to operate correctly.

Import a certificate

1. From the System Status page on the Firebox X Edge, select Administration > Certificates.
2. Adjacent to the type of certificate you want to add, click Import.
3. If your certificate is in the PEM format, copy and paste the certificate contents into the text box, or
select the second radio button and click Browse to select the certificate file.
4. If your certificate is in the PKCS12 format, select the last radio button and click Browse to select the
certificate file.
This option is available only for Local Firebox X Edge certificates.
5. Click Import.
You can repeat steps 2-5 to add more certificates.

Use a local certificate

1. From the System Status page on the Firebox X Edge, select Administration > System Security.
2. Select the local certificate you imported from the Certificate drop-down list.
3. Click Submit.
User Guide
Certificates
185