Chapter 14 Certificates
NWA1000 Series User’s Guide
125
If you configured the
Add
My Certificates
screen to have the NWA1000 Series enroll a certificate and the
certificate enrollment is not successful, you see a screen with a
Return
button that takes you back to the
Add
My Certificates
screen. Click
Return
and check your information in the
Add
My Certificates
screen.
Make sure that the certification authority information is correct and that your Internet connection is
working properly if you want the NWA1000 Series to enroll a certificate online.
14.2.2 Edit My Certificates
Click
Configuration > Object > Certificate > My Certificates
and then the
Edit
icon
to open the
My
Certificate Edit
screen. You can use this screen to view in-depth certificate information and change the
certificate’s name.
Create a certification
request and enroll for
a certificate
immediately online
Select this to have the NWA1000 Series generate a request for a certificate and apply to a
certification authority for a certificate.
You must have the certification authority’s certificate already imported in the
Trusted
Certificates
screen.
When you select this option, you must select the certification authority’s enrollment
protocol and the certification authority’s certificate from the drop-down list boxes and
enter the certification authority’s server address. You also need to fill in the
Reference
Number
and
Key
if the certification authority requires them.
Enrollment Protocol
This field applies when you select
Create a certification request and enroll for a certificate
immediately online
. Select the certification authority’s enrollment protocol from the drop-
down list box.
Simple Certificate Enrollment Protocol (SCEP)
is a TCP-based enrollment protocol that was
developed by VeriSign and Cisco.
Certificate Management Protocol (CMP)
is a TCP-based enrollment protocol that was
developed by the Public Key Infrastructure X.509 working group of the Internet
Engineering Task Force (IETF) and is specified in RFC 2510.
CA Server Address
This field applies when you select
Create a certification request and enroll for a certificate
immediately online
. Enter the IP address (or URL) of the certification authority server.
For a URL, you can use up to 511 of the following characters. a-zA-Z0-9'()+,/:.=?;!*#@$_%-
CA Certificate
This field applies when you select
Create a certification request and enroll for a certificate
immediately online
. Select the certification authority’s certificate from the
CA Certificate
drop-down list box.
You must have the certification authority’s certificate already imported in the
Trusted
Certificates
screen. Click
Trusted CAs
to go to the
Trusted Certificates
screen where you
can view (and manage) the NWA1000 Series's list of certificates of trusted certification
authorities.
Request
Authentication
When you select
Create a certification request and enroll for a certificate immediately
online
, the certification authority may want you to include a reference number and key to
identify you when you send a certification request.
Fill in both the
Reference Number
and the
Key
fields if your certification authority uses the
CMP enrollment protocol. Just the
Key
field displays if your certification authority uses the
SCEP enrollment protocol.
For the reference number, use 0 to 99999999.
For the key, use up to 31 of the following characters. a-zA-Z0-9;|`~!@#$%^&*()_+\{}':,./
<>=-
OK
Click
OK
to begin certificate or certification request generation.
Cancel
Click
Cancel
to quit and return to the
My Certificates
screen.
Table 56 Configuration > Object > Certificate > My Certificates > Add (continued)
LABEL
DESCRIPTION