ZyXEL Communications NWA5121-N, User Manual

Page: 115 / 228

Chapter 11 Certificates
NWA5000 / WAC6500 Series User’s Guide
115
If you configured the Add My Certificates screen to have the NWA/WAC enroll a certificate and
the certificate enrollment is not successful, you see a screen with a Return button that takes you
back to the Add My Certificates screen. Click Return and check your information in the Add My
Certificates screen. Make sure that the certification authority information is correct and that your
Internet connection is working properly if you want the NWA/WAC to enroll a certificate online.
Create a certification
request and enroll for
a certificate
immediately online Select this to have the NWA/WAC generate a request for a certificate and apply to a
certification authority for a certificate.
You must have the certification authority’s certificate already imported in the Trusted
Certificates screen.
When you select this option, you must select the certification authority’s enrollment
protocol and the certification authority’s certificate from the drop-down list boxes and
enter the certification authority’s server address. You also need to fill in the
Reference Number and Key if the certification authority requires them.
Enrollment Protocol This field applies when you select Create a certification request and enroll for a
certificate immediately online . Select the certification authority’s enrollment
protocol from the drop-down list box.
Simple Certificate Enrollment Protocol (SCEP) is a TCP-based enrollment
protocol that was developed by VeriSign and Cisco.
Certificate Management Protocol (CMP) is a TCP-based enrollment protocol that
was developed by the Public Key Infrastructure X.509 working group of the Internet
Engineering Task Force (IETF) and is specified in RFC 2510.
CA Server Address This field applies when you select Create a certification request and enroll for a
certificate immediately online . Enter the IP address (or URL) of the certification
authority server.
For a URL, you can use up to 511 of the following characters. a-zA-Z0-9'()+,/
:.=?;!*#@$_%-
CA Certificate This field applies when you select Create a certification request and enroll for a
certificate immediately online . Select the certification authority’s certificate from
the CA Certificate drop-down list box.
You must have the certification authority’s certificate already imported in the Trusted
Certificates screen. Click Trusted CAs to go to the Trusted Certificates screen
where you can view (and manage) the NWA/WAC's list of certificates of trusted
certification authorities.
Request
Authentication When you select Create a certification request and enroll for a certificate
immediately online , the certification authority may want you to include a reference
number and key to identify you when you send a certification request.
Fill in both the Reference Number and the Key fields if your certification authority
uses the CMP enrollment protocol. Just the Key field displays if your certification
authority uses the SCEP enrollment protocol.
For the reference number, use 0 to 99999999.
For the key, use up to 31 of the following characters. a-zA-Z0-
9;|`~!@#$%^&*()_+\{}':,./<>=-
OK Click OK to begin certificate or certification request generation.
Cancel Click Cancel to quit and return to the My Certificates screen.
Table 57
Configuration > Object > Certificate > My Certificates > Add (continued)
LABEL DESCRIPTION