Managing Certificates For Authentication - Cisco WS-CE500 Administration Manual

Administration

Managing Certificates for Authentication

Managing Certificates for Authentication
Cisco SA500 Series Security Appliances Administration Guide
Information (level 6)
Debugging (level 7)
Digital Certificates (also known as X509 Certificates), are used to authenticate the
identity of users and systems, and are issued by Certification Authorities (CAs)
such as such as VeriSign, Thawte and other organizations. Digital Certificates are
used by this router during the Internet Key Exchange (IKE) authentication phase as
an alternative authentication method. Self certificates are issued to you by various
CAs. You create and manage certificates from the Authentication (Certificates)
page.
Trusted Certificates
(CA Certificate)
Informational messages only. Syslog definition is
LOG_INFO.
Debugging messages. Syslog definition is LOG_DEBUG.
For example: If you select Critical, all messages listed
under the Critical, Emergency, and Alert categories are
logged.
Used to verify the validity of certificates generated
and signed by the CA. The Trusted Certificates table
contains the certificates for each CA and includes this
information:
CA Identity (Subject Name): The organization or
person to whom the certificate is issued.
•
Issuer Name: The name of the CA that issued the
certificate.
•
Expiry Time: The date after which the certificate
becomes invalid.
8
190