Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 14: Configuring Virtual Private Networks
Example VPN Scenarios
454
1 In the Admin Console, select Services Configuration > Certificate
Management, and then enter the following information on each tab:
a On the Firewall Certificates tab, click New and create a firewall
certificate by specify the following:
• Certificate Name = MyFirewall_cert
• Distinguished Name: CN=MyFirewall,O=bizco,C=US
• Submit to CA = Self Signed
• Signature Type = RSA
• Click Add.
• Click the Save icon.
b [Optional] On the Firewall Certificates tab, click Export and export the
firewall certificate by specify the following:
• Destination = File
• Export Private Key to File: Click Browse and specify where you want
to save the private key. The private key is often saved to an
accessible location (portable storage device or protected network)
for distribution to the client.
• Export Firewall Certificate to File: Click Browse and specify where
you want to save the firewall certificate. The firewall certificate is
often saved to an accessible location (portable storage device or
protected network) for distribution to the client.
• Click OK.
c On the Remote Certificates tab click New and create a self-signed
certificate for a client by specify the following:
• Certificate Name = Sales_A
• Distinguished Name: CN=Sales_A,O=bizco,C=US
• Submit to CA = Self Signed
• Signature Type = RSA
Important:If you are using SafeNet SoftRemote as your client software, you
must create this file using the PKS12 extension.
• Click Add.
• Click the Save icon.
d Repeat step 1c for each remote client.
e On the Remote Certificates tab, click Export and export the remote
certificate by specify the following:
• Destination = File
• Export Client Private Key to File: Click Browse and specify where
you want to save the private key.
• Export Client Certificate to File: Click Browse and specify where you
want to save the client certificate.
• Format: Select the appropriate format for the client private key and
client certificate in the corresponding Format drop-down lists.