Managing Trusted CAs
Quantum Spark 1500, 1600, and 1800 Appliances R81.10.X Locally Managed Administration Guide|260
To edit a trusted CA's configuration:
1. Select the CA from the list.
2. Click Edit.
3. Select the necessary options regarding CRL (Certificate Revocation List):
n
Retrieve CRL from HTTP Server(s) - HTTP can be used to access the CA for CRL retrieval.
When cleared, this appliance does not attempt to validate the remote site's certificate's CRL.
n
Cache CRL on the Security Gateway - Select how often is a new updated CRL is retrieved.
l
Fetch new CRL when expires - Upon expiration of the CRL.
l
Fetch new CRL every X hours - Regardless of CRL expiration.
4. Click Details to see full CA details.
5. Click Apply
To delete a trusted CA:
1. Select the trusted CA from the list and click Delete.
2. Click OK in the confirmation message.
To export the Internal CA (or other previously imported CAs):
1. Select the Internal CA in the table.
2. Click Export.
The Internal CA's identifier file is downloaded through your browser and is available to be imported to
the remote site's trusted CA list.
3. You can also export other trusted CAs you've added to the list if necessary by selecting them and
clicking Export.
To sign a remote site's certificate request by the Internal CA:
1. Click Sign a Request.
2. Click Browse to upload the signing request file as created in the remote site.
In third party appliances, make sure to look in its Administration Guide to see where signing requests
are created.
Note - The file must be in a path accessible to the appliance. After you click OK in the file
browsing window, the file is uploaded. If it is correctly formatted, it is signed by the Internal
CA and the Download button is available.
3. Click Download.
The signed certificate is downloaded through your browser and is available to be imported to the
remote site's certificates list.
To Next Page
