Draytek Vigor2760, Руководство пользователя

Страница: 307 / 619

Vigor2760 Series User’s Guide 291
Upload Certificate and
Private Key It is useful when users have separated certificates and private
keys. And the password is needed if the private key is
encrypted.
R
R
e
e
f
f
r
r
e
e
s
s
h
h
Click this button to refresh the information listed below.
V
V
i
i
e
e
w
w
Click this button to view the detailed settings for certificate request.
D
D
e
e
l
l
e
e
t
t
e
e
Click this button to remove the selected certificate
3
3
.
.
1
1
1
1
.
.
2
2
T
T
r
r
u
u
s
s
t
t
e
e
d
d
C
C
A
A
C
C
e
e
r
r
t
t
i
i
f
f
i
i
c
c
a
a
t
t
e
e
Trusted CA certificate lists three sets of trusted CA certificate. In addition, you can build a
RootCA certificate if required.
When the local client and remote client are required to make certificate authentication (e.g.,
IPsec X.509) for data passing through SSL tunnel and avoiding the attack of MITM, a trusted
root certificate authority (Root CA) will be used to authenticate the digital certificates offered
by both ends.
However, the procedure of applying digital certificate from a trusted root certificate authority
is complicated and time-consuming. Therefore, Vigor router offers a mechanism which allows
you to generate root CA to save time and provide convenience for general user. Later, such
root CA generated by DrayTek server can perform the issuing of local certificate.
Trusted CA certificate lists three sets of trusted CA certificate.
Root CA can be deleted but not edited. If you want to modify the settings for a Root CA,
please delete the one and create another one by clicking Create Root CA.
C C r r e e a a t t i i n n g g a a R R o o o o t t C C A A
Click Create Root CA to open the following page. Type in all the information that the window
request such as certifcate name (used for identifying different certificate), subject alternative
name type and relational settings for subject name. Then click
GENERATE again.