ZyXEL Communications ZyWall USG20-VPN, Руководство пользователя

Страница: 525 / 683

Chapter 29 Object
USG20(W)-VPN Series User’s Guide
525
The following table describes the labels in this screen.
29.10.4.1 The Trusted Certificates Edit Screen
Click Configuration > Object > Certificate > Trusted Certificates and then a certificate’s Edit
icon to open the Trusted Certificates Edit screen. Use this screen to view in-depth information
about the certificate, change the certificate’s name and set whether or not you want the USG to
check a certification authority’s list of revoked certificates before trusting a certificate issued by the
certification authority.
Table 222
Configuration > Object > Certificate > Trusted Certificates
LABEL DESCRIPTION
PKI Storage
Space in Use This bar displays the percentage of the USG’s PKI storage space that is currently in use.
When the storage space is almost full, you should consider deleting expired or
unnecessary certificates before adding more certificates.
Edit Double-click an entry or select it and click Edit to open a screen with an in-depth list of
information about the certificate.
Remove The USG keeps all of your certificates unless you specifically delete them. Uploading a
new firmware or default configuration file does not delete your certificates. To remove an
entry, select it and click
Remove . The USG confirms you want to remove it before doing
so. Subsequent certificates move up by one when you take this action.
Object
References You cannot delete certificates that any of the USG’s features are configured to use. Select
an entry and click
Object Reference s to open a screen that shows which settings use
the entry.
# This field displays the certificate index number. The certificates are listed in alphabetical
order.
Name This field displays the name used to identify this certificate.
Subject This field displays identifying information about the certificate’s owner, such as CN
(Common Name), OU (Organizational Unit or department), O (Organization or company)
and C (Country). It is recommended that each certificate have unique subject
information.
Issuer This field displays identifying information about the certificate’s issuing certification
authority, such as a common name, organizational unit or department, organization or
company and country. With self-signed certificates, this is the same information as in the
Subject field.
Valid From This field displays the date that the certificate becomes applicable.
Valid To This field displays the date that the certificate expires. The text displays in red and
includes an Expired! message if the certificate has expired.
Import Click Import to open a screen where you can save the certificate of a certification
authority that you trust, from your computer to the USG.
Refresh Click this button to display the current validity status of the certificates.