Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 14: Configuring Virtual Private Networks
Configuring Certificate Management
About the Remote
Certificates tab
Adding a remote
certificate
428
The Remote Certificates tab enables you to view the list of available remote
certificates. These certificates represent the potential peers with which
Sidewinder G2 can establish a VPN connection. To display the properties of a
specific certificate, select the certificate from within the list. Its properties are
displayed on the right portion of the window. For a description of these
properties, see “Adding a remote certificate”.
Note: You cannot modify the properties of a certificate from this window. To modify
a certificate you must delete it and then add it back using the new properties.
From this window, you can perform the following actions:
• Add a new certificate to the Certificate list—Click New and see “Adding a
remote certificate” on page 428 for details.
• Delete a certificate from the list—Select the certificate you want to delete
and click Delete.
• Import certificates—Click Import and see “Importing a remote certificate”
on page 434.
• Export certificates—Click Export and see “Exporting remote or firewall
certificates” on page 435.
• Query the CA for Certificate status—If a certificate request has been
submitted to be signed by a CA, click the Query button to query the CA to
see if the certificate is approved. If yes, the Status field will change to
SIGNED and the approved certificate will be retrieved.
If the certificate request is Manual PKCS10, click the Load button to query
and retrieve the signed certificate.
Note: By default, Netscape CAs and CAs that support the Simple Certificate
Enrollment Protocol (SCEP) are checked every 15 minutes for any certificates
waiting to be signed.
The Create New Remote Certificate window enables you to add a certificate to
the Remote Certificate list. To add a remote certificate, follow the steps below.
Note: The default certificate key size is 1024 bits. The default lifetime for selfsigned
certificates created on the Sidewinder G2 is five years.
1 In the Certificate Name field, type a name for this certificate.
2 In the Distinguished Name field, create a distinguished name. See
“Understanding Distinguished Name syntax” on page 416 for information on
the format that should be used. Note the following:
• The order of the specified distinguished name fields must match the
order listed in the certificate.
• Some CAs will not support the optional identity types specified in step 3
through step 5.