ZyXEL Communications USG-100@USG-200 - V2.20 ED 2 - Enrolling and Importing Ssl Client Certificates; Login Screen

Chapter 50 System
ZyWALL USG 100/200 Series User’s Guide
856
• The issuing certificate authority of the ZyWALL’s HTTPS server certificate is not
one of the browser’s trusted certificate authorities. The issuing certificate
authority of the ZyWALL's factory default certificate is the ZyWALL itself since
the certificate is a self-signed certificate.
• For the browser to trust a self-signed certificate, import the self-signed
certificate into your operating system as a trusted certificate.
• To have the browser trust the certificates issued by a certificate authority,
import the certificate authority’s certificate into your operating system as a
trusted certificate. Refer to Appendix D on page 1027 for details.
50.7.7.4 Login Screen
After you accept the certificate, the ZyWALL login screen appears. The lock
displayed in the bottom of the browser status bar denotes a secure connection.
Figure 556 Login Screen (Internet Explorer)
50.7.7.5 Enrolling and Importing SSL Client Certificates
The SSL client needs a certificate if Authenticate Client Certificates is selected
on the ZyWALL.
You must have imported at least one trusted CA to the ZyWALL in order for the
Authenticate Client Certificates to be active (see the Certificates chapter for
details).