M350 Series User Manual 97
This section provides the CA certificates setting which could check whether the X.509 certificate is
valid or not.
There is one self-signed CA (generated by the router), and it supports the user import the
self-signed CAs to the router. The self-signed CA will help the router to verify the self-signed X.509
certificate which is imported on X.509 Certificates section.
Each CA certificate will show the State and Subject information and provide the controlling buttons
to let user could download or edit the certificate/key files.
Certificate Generation
There are two kinds of certificate generated by router, one is self-signed CA, the other is X.509.
To generate the self-signed CA certificate:
1. Navigate to CA Certificates tab.
2. Click the edit button to navigate the Certificate Setting page.
3. Fill up the information of the CA certificate.
4. Click the Generate Certificate button and Save.
5. Click the Apply button to apply the changes.
To generate the X.509 certificate:
1. Make sure the self-signed CA certificate generated.
11.2.4 IPsec> CA Certificates