Draytek Vigor3910 Series, User Manual

Page: 219 / 627

Vigor3910 Series User’s Guide 209
I
I
I
I
I
I
-
-
3
3
-
-
2
2
T
T
r
r
u
u
s
s
t
t
e
e
d
d
C
C
A
A
C
C
e
e
r
r
t
t
i
i
f
f
i
i
c
c
a
a
t
t
e
e
Trusted CA certificate lists three sets of trusted CA certificate. In addition, you can build a
RootCA certificate if required.
When the local client and remote client are required to make certificate authentication (e.g.,
IPsec X.509) for data passing through SSL tunnel and avoiding the attack of MITM, a trusted
root certificate authority (Root CA) will be used to authenticate the digital certificates
offered by both ends.
However, the procedure of applying digital certificate from a trusted root certificate
authority is complicated and time-consuming. Therefore, Vigor router offers a mechanism
which allows you to generate root CA to save time and provide convenience for general user.
Later, such root CA generated by DrayTek server can perform the issuing of local certificate.
Info Root CA can be deleted but not edited. If you want to modify the settings
for a Root CA, please delete the one and create another one by clicking
Create Root CA.