Motorola WiNG 5.6, Справочное руководство

Страница: 793 / 1048

Operations 12 - 53
5. Define the following configuration parameters required for the Import of the Trustpoint:
A certificate authority (CA) is a network authority that issues and manages security credentials and public keys for message
encryption. The CA signs all digital certificates it issues with its own private key. The corresponding public key is contained
within the certificate and is called a
CA certificate .
If a certificate displays within the Certificate Management screen with a CRL, that CRL can be imported. A certificate
revocation list (CRL) is a list of revoked certificates, or certificates no longer valid. A certificate can be revoked if the CA
improperly issued a certificate, or if a private key is compromised. The most common reason for revocation is the user no
longer being in sole possession of the private key.
Signed certificates (or root certificates) avoid the use of public or private CAs. A self-signed certificate is an identity
certificate signed by its own creator, thus the certificate creator also signs off on its legitimacy. The lack of mistakes or
corruption in the issuance of self signed certificates is central.
6. Define the following configuration to import the Trustpoint from a location on the network. To do so, select From Network
and provide the following information.
Import Select the type of Trustpoint to import. The following Trustpoints can be imported:
• Import – Select to import any trustpoint.
• Import CA – Select to import a Certificate Authority (CA) certificate on to the access
point.
• Import CRL – Select to import a Certificate Revocation List (CRL), CRLs are used to
identify and remove those installed certificates that have been revoked or are no longer
valid.
• Import Signed Cert – Select to import a self signed certificate.
Trustpoint Name Enter the 32 character maximum name assigned to the target trustpoint. The trustpoint
signing the certificate can be a certificate authority, corporation or individual.
URL Provide the complete URL to the location of the trustpoint. This option is available by
default. Click the
Advanced link next to this field to display more fields to provide detailed
trustpoint location information.
Protocol If using Advanced settings, select the protocol used for importing the target trustpoint.
Available options include:
• tftp
• ftp
• sftp
• http
• cf
• usb1
• usb2
• usb3
• usb4
Port If using Advanced settings, use the spinner control to set the port. This option is not valid
for cf and usb1 - 4.
IP Address If using Advanced settings, enter IP address of the server used to import the trustpoint.
This option is not valid for cf and usb1 - 4.