Application Examples
R&S
®
GP-E/GP-S
157User Manual v16.2.1 ─ 01
2.
Expand the view of the "Certificates" list by clicking next to the search field at the
top of the item list bar.
3.
Click the (Renew) button behind the certificate or CA that you desire to renew.
4. Optional: If the signing CA has a password, enter it under "CA Password" on the
editor panel that opens.
5. Optional: Select "Show Password" to verify the CA password.
6. Under "Issued on" and "Expires on" , enter a new validity range in the format
MM/DD/YYYY or use the date pickers (
) to set the new dates.
7. Click "Renew" to rebuild the tree of authorities and change the validity status of the
certificate.
4.10.9 Revoking a Certificate
1. Navigate to "Cert. Management > Certificates" .
2.
Click the
(Revoke) button behind the certificate or CA you desire to permanently
revoke.
3. Optional: If the signing CA has a password, enter it under "CA Password" on the
editor panel that opens.
4. Optional: Select "Show Password" to verify the CA password.
5. Select the reason for revoking the certificate from the drop-down list.
6. Click "Revoke" to change the validity status of the certificate.
Revoking a certificate cannot be undone. Handle with care.
4.11 Setting Up OCSP/CRL Services
Enable the OCSP and/or CRL services to allow clients to verify the validity of certifi-
cates issued by the central firewall.
The following example shows how to set up the OCSP and CRL services.
1. Navigate to " Cert. Management > OCSP/CRL" .
An editor panel is opened, allowing you to configure the OCSP and CRL services.
Setting Up OCSP/CRL Services