8950 Aaa Certificate Manager; The Certificate Manager Panel - Alcatel-Lucent 8950 AAA User Manual

8950 AAA Certificate Manager

............................................................................................................................................................................................................................................................
Root certificates are used to sign client and server certificates. For each root certificate it
generates, aaa-cert creates a private and a public key. The private key is used to sign other
certificates. The public key is used to verify other (server & client) certificates signed by
the root certificate.
Server certificates are used by 8950 AAA to authenticate itself to remote clients. Server
certificates are signed by a root certificate. In order to sign the server certificate, aaa-cert
needs access to a root certificate and the private key associated with the certificate.
The aaa-cert tool can also be used to generate PKCS #10 Certificate Requests for a server
certificate. This request can then be submitted to a certificate authority which will generate
the server certificate. That functionality is not covered in this document.
Client certificates are used by clients to authenticate themselves to 8950 AAA. Client
certificates are signed by a root certificate. In order to sign the server certificate, aaa-cert
needs access to a root certificate and the private key associated with the certificate.
Important!
refer to

The Certificate Manager Panel

File manager panel
The Certificate Manager panel displays a list of certificates in the run directory of the
PolicyServer. This panel enables the user to perform a variety of operations on the 8950
AAA Certificate Manager files. These operations include:
Create Certificate
•
View Certificate
•
Delete a Certificate
•
Copy the contents of a certificate to a new certificate
•
Rename an existing certificate
•
Refresh the list of certificates
•
Copy the contents of a certificate to the clipboard
•
Important!
To display the Certificate Manager panel, select Certificate Manager from the
Navigation Pane, under File Tools, as shown in
............................................................................................................................................................................................................................................................
2 2 -2
For more information about Root, Server, and Client certificates, please
"Notes on Using Certificates" on page
All certificate operations are limited to the 8950 AAA run directory.
The Certificate Manager Panel
20.
Figure 22-1.
365-360-001R6.0
Issue 1, December 2008