D-Link DSR-1000N, Руководство пользователя

Страница: 104 / 200

Unified Services Router User Manual
102
A self certificate is a certificate issued by a CA identifying your device (or self-
signed if you don’t want the identity protection of a CA). The Active Self Certificate
table lists the self certificates currently loaded on the gateway. The following
information is displayed for each uploaded self certificate:
Name: The name you use to identify this certificate, it is not displayed to IPSec VPN
peers or SSL users.
Subject Name: This is the name that will be displayed as the owner of this certificate.
This should be your official registered or company name, as IPSec or SSL VPN peers
are shown this field.
Serial Number: The serial number is maintained by the CA and used to identify this
signed certificate.
Issuer Name: This is the CA name that issued (signed) this certificate
Expiry Time: The date after which this signed certificate becomes invalid – you
should renew the certificate before it expires.
To request a self certificate to be signed by a CA, you can generate a Certificate
Signing Request from the gateway by entering identification parameters and passing it
along to the CA for signing. Once signed, the CA’s Trusted Certificate and signed
certificate from the CA are uploaded to activate the self-certificate validating the
identity of this gateway. The self certificate is then used in IPSec and SSL
connections with peers to validate the gateway’s authenticity.
Figu re 66: Certificate summ ary for IPSec and HTTPS m an agement