Stormshield SN series - Add; Delete; Action

Add
The Certificates and PKI module window makes it possible to Add several types of authorities:
For each of them, a wizard will appear so that the authority’s properties can be defined.
To find out which characters are allowed or prohibited in various fields, please refer to Appendix
A: Allowed names.
NOTE
You can now add CRLDPs (Certificate Revocation ListDistribution Points) for CAs imported
via the GUI.
Delete
This button relates to the left column. Select the item from the list of CAs, sub-CAs or certificates
that you wish to remove and click on Delete.
Action
This button relates to the left column. Select a CA, sub-CA or certificate from the list and click on
the Action button. The possible actions vary according to the type of object selected.
Actions on a CA or sub-CA
Create or renew a CRL A CRL (Certificate Revocation List) is a list of certificate IDs that have been revoked or
are no longer valid and are no longer trustworthy. The certificate authority signs this
list in order to prevent it from being modified by unauthorized parties.
This action allows creating or renewing a CRL for the selected CA or sub-CA.
You need to enter the password that protects the authority, and then click onCreate
or renew a CRL.
Remove the CRL This action allows deleting the CRL for the selected CA or sub-CA.
REMARK
This action is not available (grayed-out option) when the CA or sub-CA does not
have a CRL.
Set as default This action allows defining the certificate authority used by default on the Firewall.
Actions on a certificate
Delete private key This action allows deleting a certificate’s private key. When the certificate is used in
the firewall’s configuration, you will be asked to confirm the deletion. It will then be
possible to:
l Cancel the deletion (click on Cancel),
l Display configuration elements in which the certificate is used (click on
Check certificate use),
l Confirm the deletion of the private key (click on Confirm deletion).
REMARK
This action is not available (grayed-out option) when the selected certificate
does not have a private key.
Page 65/448 sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
SNS - USER CONFIGURATION MANUAL V.3
CERTIFICATES AND PKI