Motorola AP-6511 - Page 344

Motorola Solutions AP-6511 Access Point System Reference Guide
12-18
10.Define the following configuration parameters required for the Import of the CRL:
11.Select OK to import the CRL. Select Cancel to revert the screen to its last saved configuration.
12.To import a signed certificate, select the Import Signed Cert button from the Trustpoints screen.
Signed certificates (or root certificates) avoid the use of public or private CAs. A self-signed certificate is
an identity certificate signed by its own creator, thus the certificate creator also signs off on its
legitimacy. The lack of mistakes or corruption in the issuance of self signed certificates is central.
Self-signed certificates cannot be revoked which may allow an attacker who has already gained access
to monitor and inject data into a connection to spoof an identity if a private key has been compromised.
However, CAs have the ability to revoke a compromised certificate, which prevents its further use.
Trustpoint Name Enter the 32 character maximum name assigned to the target trustpoint
signing the certificate. A trustpoint represents a CA/identity pair containing
the identity of the CA, CA-specific configuration parameters, and an
association with an enrolled identity certificate.
From Network Select the From Network radio button to provide network address
information to the location of the target CRL. The number of additional fields
that populate the screen is also dependent on the selected protocol. This is the
default setting.
Cut and Paste Select Cut and Paste to copy an existing CRL into the cut and past field. When
pasting a CRL no additional network address information is required.
URL Provide the complete URL to the location of the CRL. If needed, select
Advanced to expand the dialog to display network address information to the
location of the target CRL. The number of additional fields that populate the
screen is also dependent on the selected protocol.
Protocol Select the protocol used for importing the CRL. Available options include:
• tftp
• ftp
• sftp
• http
•cf
•usb1
•usb2
Port Use the spinner control to set the port. This option is not valid for cf, usb1, and
usb2.
IP Address Enter IP address of the server used to import the CRL. This option is not valid
for cf, usb1, and usb2.
Hostname Provide the hostname of the server used to import the CRL. This option is not
valid for cf, usb1, and usb2.
Path Specify the path to the CRL. Enter the complete relative path to the file on the
server.