Fortinet FortiGate FortiGate-5020, Руководство администратора

Страница: 272 / 402

272
01-28008-0013-20050204 Fortinet Inc.
Certificates VPN
Certificates
Digital certificates are downloadable files that you can install on the FortiGate unit and
on remote peers and clients for authentication purposes.
An X.509 digital certificate contains information that has been digitally signed by a
trusted third party known as a certificate authority (CA). Because CAs can be trusted,
the certificates issued by a CA are deemed to be trustworthy.
To view and manage local certificates
1 Go to VPN > Certificates > Local Certificates .
2 Follow the guidelines in these sections:
•
“Local certificate list” on page 272
• “Certificate request” on page 273
• “Importing signed certificates” on page 274
To import and view CA certificates
1 Go to VPN > Certificates > CA Certificates .
2 For more information, see “CA certificate list” on page 275 and “Importing CA
certificates” on page 275 .
For detailed information and step-by-step procedures related to obtaining and
installing digital certificates, see the
FortiGate VPN Guide .
Local certificate list
Figure 141:Certificate list
Ending IP Type the ending address in the range of reserved IP addresses.
User Group Select the name of the L2TP user group that you defined.
Disable L2TP Select the option to disable L2TP support.
Generate Select to generate a local certificate request. See “Certificate request” on
page 273 .
Import Select to import a signed local certificate. See “Importing signed certificates”
on page 274 .
Name The names of existing local certificates and pending certificate requests.
Subject The Distinguished Names (DNs) of local signed certificates.
Status The status of the local certificate. PENDING designates a certificate request
that should be downloaded and signed.
View Certificate
Detail icon Select to display certificate details such as the certificate name, issuer,
subject, and valid certificate dates. See Figure 142 .