MB Connect Line mbNET.rokey RKH 210, Manual

Page: 83 / 324

23.6.3 Partner certificate (IPSec)
Partner certificates are certificates of the remote terminal. They are only required if the VPN settings "Authen-
tication via partner certificate" have been selected.
In this case, the criterion for deciding the validity of a certificate is that a copy of this partner certificate exists
locally.
The certificate of the remote terminal must be selected by the corresponding crt file and then imported. Multiple
crt files can be imported.
The entry from the root certificate will be used as a criterion to decide whether the certificate of the in-dialling
device is valid. The CA certificate contains information about whether the certificate of the remote terminal is
valid or not.
The CA certificate is available as * .crt file and must be imported into the mbNET.
23.6.3.1 Import partner certificate
Designation Description
File Click "Select file" and select the required *.crt file (in this example: "DokuCertifi-
cate.crt"
Name for this certifi-
cate (optional) The name for the imported certificate can be freely assigned / changed.
Click Import and then Close.
Clicking on “Apply changes” will apply all stored settings/changes and store them perma-
nently on the router.
"Clear Changes” will reset/discard all temporarily stored settings/changes.
System - settings and basic router configuration | Page 83 of 324