ZyXEL Communications PMG2006-T20A, Руководство пользователя

Страница: 111 / 181

PMG2006-T20A User’s Guide
111
C
HAPTER
16
Certificates
16.1 Overview
The PMG2006-T20A can use certificates (also called digital IDs) to authenticate users. Certificates are
based on public-private key pairs. A certificate contains the certificate owner’s identity and public key.
Certificates provide a way to exchange public keys for use in authentication.
16.1.1 What You Can Do in this Chapter
• Use the Local Certificates screen to generate certification requests and import the PMG2006-T20A's
CA-signed certificates ( Section 16.4 on page 114 ).
• Use the Trusted CA screen to save the certificates of trusted CAs to the PMG2006-T20A ( Section 16.4
on page 114 ).
16.2 What You Need to Know
The following terms and concepts may help as you read through this chapter.
Certification Authority
A Certification Authority (CA) issues certificates and guarantees the identity of each certificate owner.
There are commercial certification authorities like CyberTrust or VeriSign and government certification
authorities. The certification authority uses its private key to sign certificates. Anyone can then use the
certification authority's public key to verify the certificates. You can use the PMG2006-T20A to generate
certification requests that contain identifying information and public keys and then send the
certification requests to a certification authority.
16.3 The Local Certificates Screen
Click Security > Certificates to open the Local Certificates screen. This is the PMG2006-T20A’s summary
list of certificates and certification requests.
Figure 75 Security > Certificates > Local Certificates