Draytek VigorBX 2000 Series, User Manual

Page: 398 / 777

VigorBX 2000 Series User’s Guide 386
V
V
-
-
3
3
-
-
2
2
T
T
r
r
u
u
s
s
t
t
e
e
d
d
C
C
A
A
C
C
e
e
r
r
t
t
i
i
f
f
i
i
c
c
a
a
t
t
e
e
Trusted CA certificate lists three sets of trusted CA certificate. In addition, you can build a
RootCA certificate if required.
When the local client and remote client are required to make certificate authentication (e.g.,
IPsec X.509) for data passing through SSL tunnel and avoiding the attack of MITM, a trusted
root certificate authority (Root CA) will be used to authenticate the digital certificates
offered by both ends.
However, the procedure of applying digital certificate from a trusted root certificate
authority is complicated and time-consuming. Therefore, Vigor router offers a mechanism
which allows you to generate root CA to save time and provide convenience for general user.
Later, such root CA generated by DrayTek server can perform the issuing of local certificate.
Info Root CA can be deleted but not edited. If you want to modify the settings
for a Root CA, please delete the one and create another one by clicking
Create Root CA.
C
C
r
r
e
e
a
a
t
t
i
i
n
n
g
g
a
a
R
R
o
o
o
o
t
t
C
C
A
A
Click Create Root CA to open the following page. Type in all the information that the window
request such as certifcate name (used for identifying different certificate), subject
alternative name type and relational settings for subject name. Then click GENERATE again.