Managing Users and Security
Managing Certificates
Makito
X User’s Guide, v2.2, Issue 02
225
Managing Certificates
The Certificates page shows the list of Identity and CA Certificates installed on the
Makito
X.
•
Identity Certificates:
An Identity Certificate identifies the Makito
X during the
authentication process when trying to establish a TLS connection in Audit or HTTPS
session startup. Its Common Name or Alternate Subject Names must match the
encoder’s IP address and/or its FQDN (Fully Qualified Domain Name) if DNS is used.
•
CA Certificates:
A CA Certificate is normally a root certificate from a certificate
authority that is generally widely known and trusted. CA Certificates are stored on the
encoder so they can be used to authenticate CA-signed certificates from audit servers.
You will need to import the root certificate from the CA that signed the certificate of
the configured remote audit server. It is also recommended to import the root
certificate of the CA that signed your Makito
X identity certificate (if you have one).
From the Certificates page, you can generate, import, view, and delete Identity Certificates,
as well as select the default Identity Certificate. You can also import, view, and delete CA
Certificates.
To open the Certificates page:
1.
On the Administration page, click
C
ERTIFICATES
from the sidebar menu.
The Certificates page opens as shown in the following example.
The default Identity Certificate is indicated with a blue check.