Sidewinder G2 6.1.1 Administration Guide - Glossary of Technical ...

Configuring Certificate Management
13-38 Configuring Virtual Private Networks
From this tab, you can perform the following actions:
Note: You cannot modify the properties of a certificate from this window. To modify a
certificate you must delete it and then add it back using the new properties.
Add a firewall certificate—Click New to add a certificate to the
Certificate list. See “Adding a firewall certificate” on page 13-38 for
details.
Delete a firewall certificate—Highlight the certificate and click Delete
to remove the selected certificate from the Certificate list.
Note: A certificate cannot be deleted if it is currently used by one or more areas (for
example, Security Associations, Application Defenses, etc.).
Import a firewall certificate—Click Import to import an existing
certificate and its related private key file. See “Importing a firewall
certificate” on page 13-46 for more information.
Export a firewall certificate—Click Export to export the selected
certificate to a file. The export function is generally used when
capturing the certificate information needed by a remote partner
such as a VPN client. See “Exporting remote or firewall certificates”
on page 13-48 for more details.
Retrieve a certificate—If a certificate request has been submitted to
be signed by a CA, click the Query button to query the CA to see if
the certificate is approved. If yes, the Status field will change to
SIGNED and the approved certificate will be retrieved.
If the certificate request is Manual PKCS10, click the Load button to
load the signed certificate from a file supplied by the CA.
Note: By default, Netscape CAs and CAs that support the Simple Certificate Enrollment
Protocol (SCEP) are checked every 15 minutes for any certificates waiting to be signed.
Adding a firewall certificate The Create New Firewall Certificate window enables you to add a
certificate to the Firewall Certificate list. To add a certificate, follow the
steps below.
Note: The default certificate key size is 1024 bits. The default lifetime for self-signed
certificates created on the Sidewinder G2 is five years.
1. In the Certificate Name field, type a name for this certificate.
2. In the Distinguished Name field, create a distinguished name. See
“Understanding Distinguished Name syntax” on page 13-28 for
information on the format that should be used.
Note: The order of the specified distinguished name fields must match the order
listed in the certificate.