Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SECURE ACCESS DEVICES GUIDE REV 01 Manual page 205

Copyright © 2010, Juniper Networks, Inc.
Table 47: Secure Access Manual CA Certificate Configuration
Details (continued)
Option Function
Participate in Client Specifies if you want
Certificate Negotiation to have the CA
participate in client
certificate selection
for authentication.
Import from Specifies the trusted
client file that you
can import from the
database.
OCSP > Settings tab
OCSP settings Specifies the OCSP
method that the
device uses to verify
client certificate
status.
Device Certificate to Specifies the device
sign the request certificate that is
used to sign for the
request.
Use Nonce Specifies the device
to use nonce.
CRL Settings tab
CDP(s) specified in the Specifies the CDP(s)
Trusted Client CA in the trusted client
CA.
CDP(s) specified in the Specifies the CDP(s)
client certificate in the client
certificate.
Manual configured CDP Specifies the manual
configured CDPs.
CRL Download Specifies the
Frequency (minutes) frequency of the CRL
download.
Chapter 11: Configuring Authentication and Directory Servers
Your Action
Select the check box.
NOTE: In client certificate authentication or
restriction, the device sends a list of all trusted
client CAs configured in the trusted client CA
store with this flag enabled to the user's
browser for user certificate selection. The
browser prompts the client certificates whose
issuer CA and/or root CA is in that list. This
option allows you to control which client
certificate(s) are prompted for selection.
Clearing this option for all certificates in a CA
chain results in those certificates not being
prompted.
Use Browse to select and import the trusted
client files from.
Select a value from the drop-down list. The list
includes:
Responder specified in CA certificate
Manually configured responders
Responder specified in Client certificate
Select a value from the drop-down list.
Select the check box to enable this option.
Select the check box to enable this option.
Select the check box to enable this option.
Select the check box to enable this option.
Select the frequency of the CRL download. The
default value is 1440.
187