ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual
Understanding the Certificates Screen
To display the Certificates screen, select VPN form the main menu and Certificates from the submenu. Because of the large size of this screen, and because of the way the information is presented, the Certificates screen is divided and presented in this manual in different figures.
The Certificates screen lets you to view the currently loaded digital certificates, upload a new digital certificate, and generate a Certificate Signing Request (CSR). The VPN firewall typically holds two types of digital certificates:
•CA digital certificates. Each CA issues its own CA identity digital certificate to validate communication with the CA and to verify the validity of digital certificates that are signed by the CA.
•Self digital certificates. The digital certificates that are issued to you by a CA to identify your device.
The Certificates screen contains four tables that are explained in detail in the following sections:
•Trusted Certificates (CA Certificate) table. Contains the trusted digital certificates that were issued by CAs and that you uploaded (see “Viewing and Loading CA Certificates” on this page).
•Active Self Certificates table. Contains the digital self certificates that were issued by CAs and that you uploaded (see “Understanding and Viewing Active Self Certificates” on page
•Self Certificate Requests table. Contains the self certificate requests that you generated. These request may or may not have been submitted to CAs, and CAs may or may not have issued digital certificates for these requests. Only the digital self certificates in the Active Self Certificates table are active on the VPN firewall (see “Obtaining a Self Certificate from a Certificate Authority” on page
•Certificate Revocation Lists (CRL) table. Contains the lists with digital certificates that have been revoked and are no longer valid, that were issued by CAs, and that you uploaded. Note, however, that the table displays only the active CAs and their critical release dates. (see “Managing your Certificate Revocation List (CRL)” on page
Viewing and Loading CA Certificates
The Trusted Certificates (CA Certificates) table lists the certificates of CAs and contains the following data:
•CA Identity (Subject Name). The organization or person to whom the certificate is issued.
•Issuer Name. The name of the CA that issued the certificate.
•Expiry Time. The date after which the certificate becomes invalid.
Virtual Private Networking |
