Rohde & Schwarz GP-E - Exporting a Certificate; Exporting a Certificate Signing Request

Application Examples
R&S
®
GP-E/GP-S
155User Manual v16.2.1 ─ 01
Exporting the certificate signing request (CSR), signing it externally with a CA and then
reimporting the new public certificate with or without a CA chain, can be used in an
environment that already has a trusted CA to extend that trust onto the SSL proxy CA.
The SSL proxy CA then creates trusted certificates when intercepting the client's SSL
connections.
4.10.4 Exporting a Certificate
1. Navigate to "Cert. Management > Certificates" .
2.
Expand the view of the "Certificates" list by clicking
next to the search field at the
top of the item list bar.
3.
Click the (Export) button behind the certificate or CA you desire to download to
the local disk.
4. Select one of the following formats: PEM, CRT or PKCS 12. PEM is selected by
default.
5. Optional: Select "Export CA Chain" to attach the public keys of the parent CA to the
exported file.
6. Optional: Select "Export Private Key" to include the private key of the selected cer-
tificate in the exported file.
7. Optional and only available if "Export Private Key" is selected: Enter a key "Pass-
word" to decrypt the private key before exporting the certificate or CA if the key is
password protected on the firewall.
8. Optional and only available if "Export Private Key" is selected: Select "Show Pass-
word" to verify the key password.
9. Optional and only available if "Export Private Key" is selected: Enter a "Transport
Password" to encrypt the export file. When the download format PEM or CRT is
selected, the transport password is used to encrypt the private key. With PKCS 12
being selected, the transport password is used to encrypt the whole PKCS 12 file.
10. Click "Export" to download the certificate or the CA.
4.10.5 Exporting a Certificate Signing Request
To renew the validity of a certificate signed by an external CA, follow these steps:
1. Navigate to "Cert. Management > Certificates" .
2.
Expand the view of the "Certificates" list by clicking
next to the search field at the
top of the item list bar.
Handling Certificates