Motorola Solutions AP-6511 Access Point System Reference Guide
5-12
11. Select OK to import the CRL. Select Cancel to revert the screen to its last saved configuration.
12. To import a signed certificate, select the Import Signed Cert button from the Certificate Management
screen.
Signed certificates (or root certificates) avoid the use of public or private CAs. A self-signed certificate is
an identity certificate signed by its own creator, thus the certificate creator also signs off on its
legitimacy. The lack of mistakes or corruption in the issuance of self signed certificates is central.
Self-signed certificates cannot be revoked which may allow an attacker who has already gained access
to monitor and inject data into a connection to spoof an identity if a private key has been compromised.
However, CAs have the ability to revoke a compromised certificate, which prevents its further use.
Figure 5-7 Certificate Management - Import Signed Cert screen
13. Define the following configuration parameters required for the Import of the CA certificate:
IP Address Enter IP address of the server used to import the CRL. This option is not valid
for cf, usb1, and usb2.
Hostname Provide the hostname of the server used to import the CRL. This option is not
valid for cf, usb1, and usb2.
Path Specify the path to the CRL. Enter the complete relative path to the file on the
server.
Certificate Name Enter the 32 character maximum name of the trustpoint with which the
certificate should be associated.
From Network Select the From Network radio button to provide network address
information to the location of the target signed certificate. The number of
additional fields that populate the screen is also dependent on the selected
protocol.
Cut and Paste Select the Cut and Paste radio button to copy an existing signed certificate
into the cut and past field. When pasting a signed certificate, no additional
network address information is required.
To Next Page
Loading...
