Chapter 15 Certificates
NWA50AX User’s Guide
128
If you configured the Ad d My Ce rtific a te s screen to have the Zyxel Device enroll a certificate and the
certificate enrollment is not successful, you see a screen with a Re turn button that takes you back to the
Add My C e rtific a te s screen. Click Re turn and check your information in the Add My C e rtific a te s screen.
Make sure that the certification authority information is correct and that your Internet connection is
working properly if you want the Zyxel Device to enroll a certificate online.
15.2.2 Edit My C e rtific a te s
Click Co nfig ura tio n > O b je c t > Ce rtific a te > My C e rtific a te s and then the Edit icon to open the My
C e rtific a te Edit screen. You can use this screen to view in-depth certificate information and change the
certificate’s name.
Create a certification
request and enroll for
a certificate
immediately online
Select this to have the Zyxel Device generate a request for a certificate and apply to a
certification authority for a certificate.
You must have the certification authority’s certificate already imported in the Truste d
C e rtific a te s screen.
When you select this option, you must select the certification authority’s enrollment
protocol and the certification authority’s certificate from the drop-down list boxes and
enter the certification authority’s server address. You also need to fill in the Re fe re nc e
Num b e r and Ke y if the certification authority requires them.
Enrollment Protocol This field applies when you select Cre a te a c e rtific a tio n re q ue st a nd e nro ll for a c e rtific a te
im m e dia te ly o nline . Select the certification authority’s enrollment protocol from the drop-
down list box.
Sim ple Ce rtific a te Enro llme nt Pro to c o l (SCEP) is a TCP-based enrollment protocol that was
developed by VeriSign and Cisco.
C e rtific a te Ma na g e m e nt Protoc o l (CMP) is a TCP-based enrollment protocol that was
developed by the Public Key Infrastructure X.509 working group of the Internet
Engineering Task Force (IETF) and is specified in RFC 2510.
CA Server Address This field applies when you select C re a te a c e rtific a tio n re q ue st a nd e nroll for a c e rtific a te
im m e dia te ly o nline . Enter the IP address (or URL) of the certification authority server.
For a URL, you can use up to 511 of the following characters. a-zA-Z0-9'()+,/:.=?;!*#@$_%-
CA Certificate This field applies when you select Cre a te a c e rtific a tio n re q ue st a nd e nro ll for a c e rtific a te
im m e dia te ly o nline . Select the certification authority’s certificate from the C A Ce rtific a te
drop-down list box.
You must have the certification authority’s certificate already imported in the Truste d
C e rtific a te s screen. Click Truste d CA s to go to the Truste d C e rtific a te s screen where you
can view (and manage) the Zyxel Device's list of certificates of trusted certification
authorities.
Request
Authentication
When you select Cre a te a c e rtific a tio n re q ue st a nd e nro ll fo r a c e rtific a te imm e diate ly
o nline , the certification authority may want you to include a reference number and key to
identify you when you send a certification request.
Fill in both the Re fe re nc e Num b e r and the Ke y fields if your certification authority uses the
CMP enrollment protocol. Just the Ke y field displays if your certification authority uses the
SCEP enrollment protocol.
For the reference number, use 0 to 99999999.
For the key, use up to 31 of the following characters. a-zA-Z0-9;|`~!@#$%^&*()_+\{}':,./
<>=-
OK Click O K to begin certificate or certification request generation.
Cancel Click Ca nc e l to quit and return to the My Ce rtific a te s screen.
Table 55 Configuration > Object > Certificate > My Certificates > Add (continued)
LABEL DESCRIPTION
To Next Page
Loading...
