Juniper NETWORK AND SECURITY MANAGER, Manual

Page: 205 / 340

Table 47: Secure Access Manual CA Certificate Configuration
Details
(continued)
Your Action Function Option
Select the check box.
NOTE: In client certificate authentication or
restriction, the device sends a list of all trusted
client CAs configured in the trusted client CA
store with this flag enabled to the user’s
browser for user certificate selection. The
browser prompts the client certificates whose
issuer CA and/or root CA is in that list. This
option allows you to control which client
certificate(s) are prompted for selection.
Clearing this option for all certificates in a CA
chain results in those certificates not being
prompted.
Specifies if you want
to have the CA
participate in client
certificate selection
for authentication. Participate in Client
Certificate Negotiation
Use Browse to select and import the trusted
client files from.
Specifies the trusted
client file that you
can import from the
database. Import from
OCSP > Settings tab
Select a value from the drop-down list. The list
includes:
• Responder specified in CA certificate
•
Manually configured responders
• Responder specified in Client certificate
Specifies the OCSP
method that the
device uses to verify
client certificate
status. OCSP settings
Select a value from the drop-down list. Specifies the device
certificate that is
used to sign for the
request. Device Certificate to
sign the request
Select the check box to enable this option. Specifies the device
to use nonce. Use Nonce
CRL Settings tab
Select the check box to enable this option. Specifies the CDP(s)
in the trusted client
CA. CDP(s) specified in the
Trusted Client CA
Select the check box to enable this option. Specifies the CDP(s)
in the client
certificate. CDP(s) specified in the
client certificate
Select the check box to enable this option. Specifies the manual
configured CDPs. Manual configured CDP
Select the frequency of the CRL download. The
default value is 1440. Specifies the
frequency of the CRL
download. CRL Download
Frequency (minutes)
187 Copyright © 2010, Juniper Networks, Inc.
Chapter 11: Configuring Authentication and Directory Servers