Draytek Vigor2926, User Manual

Page: 374 / 968

Vigor2926 Series User’s Guide 358
V
V
-
-
3
3
-
-
2
2
T
T
r
r
u
u
s
s
t
t
e
e
d
d
C
C
A
A
C
C
e
e
r
r
t
t
i
i
f
f
i
i
c
c
a
a
t
t
e
e
Trusted CA certificate lists three sets of trusted CA certificate. In addition, you can build a
RootCA certificate if required.
When the local client and remote client are required to make certificate authentication (e.g.,
IPsec X.509) for data passing through SSL tunnel and avoiding the attack of MITM, a trusted
root certificate authority (Root CA) will be used to authenticate the digital certificates
offered by both ends.
However, the procedure of applying digital certificate from a trusted root certificate
authority is complicated and time-consuming. Therefore, Vigor router offers a mechanism
which allows you to generate root CA to save time and provide convenience for general user.
Later, such root CA generated by DrayTek server can perform the issuing of local certificate.
Info Root CA can be deleted but not edited. If you want to modify the settings
for a Root CA, please delete the one and create another one by clicking
Create Root CA.
C C r r e e a a t t i i n n g g a a R R o o o o t t C C A A
Click Create to open the following page. Type in all the information that the window request
such as certifcate name (used for identifying different certificate), subject alternative name
type and relational settings for subject name. Then click Generate again.