Sidewinder G2 6.1.1 Administration Guide - Glossary of Technical ...

Configuring Certificate Management
13-34 Configuring Virtual Private Networks
2. In the Type drop-down list, select the type of CA used by your location.
Valid options are:
Manual—Indicates the necessary files are obtained and loaded by
an administrator rather than by a CA.
Netscape 4.2—Indicates that a Netscape version 4.2 CA is being
defined.
SCEP (Simple Certificate Enrollment Protocol)—Indicates the CA
being defined supports this widely-used certificate enrollment
protocol. The CA can be of any type (Netscape 4.2, Baltimore,
Entrust, VeriSign, etc.) as long as it supports SCEP.
3. [Conditional] In the File field, type the name and location of the root
certificate for the CA, or click Browse to browse your network directories
for the location of the root certificate. The root certificate is used to
verify certificates issued by this CA. (This field is available only if you
select Manual in the Type field.)
Note: Valid file formats are .pem and .der. For information on obtaining a root
certificate, see the documentation that accompanied the CA.
4. [Conditional] In the URL field, type the URL address of the Netscape CA
in the URL field. Certificates that need to be signed by the CA are sent to
this address. (This field is available only if you select Netscape or SCEP in
the Type field.)
5. [Optional] In the CA Id field, type the value used to identify this specific
CA. Check with your CA administrator to determine the identifier to use.
Many administrators use the fully-qualified domain name of the CA as
the identifier. (This field is available only if you select SCEP in the Type
field.)
6. Click Add to add the CA to the Certificate Authority list. To define
another certificate authority, repeat step 1–step 5.
7. Click the Save icon.