Manage Users, Authentication, and VPN Certificates
309
NETGEAR ProSAFE VPN Firewall FVS318G v2
recommends that you replace this digital certificate with a digital certificate from a well-known
commercial CA before you deploy the VPN firewall in your network.
This section contains the following topics:
• VPN Certificates
• Manage VPN CA Certificates
• Manage VPN Self-Signed Certificates
• Manage the VPN Certificate Revocation List
VPN Certificates
You can view the loaded digital certificates, upload a new digital certificate, and generate a
certificate signing request (CSR). The VPN firewall typically holds two types of digital
certificates:
• CA certificates.
Each CA issues its own digital certificate to validate communication with
the CA and to verify the validity of digital certificates that are signed by the CA.
• Self-signed certificates. The
digital certificates are issued to you by a CA to identify
your device.
The Certificates screen contains four tables that are described in
det
ail in the following
sections:
• T
rusted Certificates (CA Certificate) table. Cont
ains the trusted digital certificates that
were issued by CAs and that you uploaded.
For more information, see Manage VPN CA Certificates o
n p
age 309.
• Active Self Certificates table. Cont
ains the self-signed certificates that were issued by
CAs and that you uploaded.
For more information, see Manage VPN Self-Signed Certificates o
n p
age 311.
• Self Certificate Requests table. Con
tains the self-signed certificate requests that you
generated. These requests were either submitted to CAs or not, and CAs either issued
digital certificates for these requests or did not. Only the self-signed certificates in the
Active Self Certificates table are active on the VPN firewall.
For more information, see Manage VPN Self-Signed Certificates on p
age 311.
• Certificate Revoc
ation Lists (CRL) table. Contains the lists with digital certificates that
were revoked and are no longer valid, that were issued by CAs, and that you uploaded.
Note, however, that the table displays only the active CAs and their critical release dates.
For more information, see Manage the VPN Certificate Revocation List on p
age 316.
Manage VPN CA Certificates
To view and upload trusted certificates:
1. Log in to the unit: