Digi AnywhereUSB Plus, Руководство пользователя, Страница: 603 / 815

Virtual Private Networks (VPN) IPsec
AnywhereUSB® Plus User Guide 603
5. Click Enable to enable the SCEP client.
6. For Renewable Time , type the number of days that the certificate enrollment can be renewed,
prior to the request expiring. This value must match the setting of the Allow renewal x days
before the certified is expired option on the Fortinet server.
7. (Optional) For CRL file name, type the filename of the Certificate Revocation List (CRL) from the
CA. The filename of the CRL corresponds to the Certificate ID of the CA created on the Fortinet
server, for example,
fortinet_example_ca.crl .
8. Click to expand SCEP server .
9. For FQDN , type the fully qualified domain name or IP address of the Fortinet server.
10. For Password , type the challenge password. This corresponds to the Default enrollment
password on the Fortinet server.
11. Click to expand Distinguished Name .
12. Type the value for each appropriate Distinguished Name attribute. The values entered here
must correspond to the DN attributes in the Enrollment Request on the Fortinet server.
13. Click Apply to save the configuration and apply the change.