Verifying A Trusted Remote Host's Certificate; Trusted Remote Host Certificate Fingerprints; Figure 112 Remote Host Certificates - ZyXEL Communications ZyWALL 2Plus User Manual

Internet security appliance

Hide thumbs Also See for ZyWALL 2Plus:

Table of Contents

ZyWALL 2 Plus User's Guide

Table 71 Trusted Remote Hosts (continued)

12.12 Verifying a Trusted Remote Host's Certificate

Certificates issued by certification authorities have the certification authority's signature for

you to check. Self-signed certificates only have the signature of the host itself. This means that

you must be very careful when deciding to import (and thereby trust) a remote host's self-

signed certificate.

A certificate's fingerprints are message digests calculated using the MD5 or SHA1 algorithms.

The following procedure describes how to use a certificate's fingerprint to verify that you have

the remote host's actual certificate.

1 Browse to where you have the remote host's certificate saved on your computer.

2 Make sure that the certificate has a ".cer" or ".crt" file name extension.

3 Double-click the certificate's icon to open the Certificate window. Click Details and

scroll down to the Thumbprint Algorithm and Thumbprint fields.

Click Import to open a screen where you can save the certificate of a remote host

(which you trust) from your computer to the ZyWALL.

Click this button to display the current validity status of the certificates.

Chapter 12 Certificates