Avocent DSView 3 Installer/User Manual page 46

28 DSView 3 Software Installer/User Guide
Table 1.10: System Certificate Policy (Continued)
Feature
Usage flags
Validity period
Verify signatures
Certificate Revocation Lists (CRL)
CRL checks
Distribution points
Reject on error
Secure Sockets Layer (SSL)
Name verification
Subject alternative names
User Certificates
Verify using trust store
5. Click Save.
To display and manage the trust store:
1. Click the System tab.
2. Click Global Properties in the top navigation bar.
3. In the side navigation bar, click X.509 Certificates, and then click Trust Store. The System
Trust Store window will open, listing all trusted certificate authorities known to the DSView 3
software. By default, the list contains the standard CAs from Java.
4. To view or change information about a certificate, click on its name. The System Trust Store
Entry window will open. You may change the CRL Location, which indicates where the CRL
should be obtained for that CA. If you change the location, click Save. Then click Close.
5. To delete one or more certificates:
a. Click the checkbox to the left of the certificate name. To delete all certificates on the page,
click the checkbox to the left of Name at the top of the list.
Value when enabled
A certificate may be used only for the reasons dictated in the
certificate. For example, a certificate must be flagged as CA
(Certificate Authority) to be considered a valid certificate issuer.
The current date and time on the server must be within the window on
each certificate in the chain.
The signatures within the certificate chain are checked for validity.
If CRLs are available, they are checked to determine a certificate's
revocation status.
CRLs may be located using the distribution point certificate extension.
The DSView 3 software will reject a certificate chain if a CRL is
specified (either in the certificate or the DSView 3 trust store) and it
cannot be read or is invalid.
Outbound SSL connections will verify server names.
The server names may match the certificate common name or one of
the subject alternative names.
User certificates presented to the DSView 3 software are verified using
the System Trust Store.