Chapter 40 Certificates

The following table describes the labels in this screen.

Table 184 Object > Certificate > My Certificates

LABEL

DESCRIPTION

PKI Storage

This bar displays the percentage of the ZyWALL’s PKI storage space that is

Space in Use

currently in use. When the storage space is almost full, you should consider

 

deleting expired or unnecessary certificates before adding more certificates.

 

 

#

This field displays the certificate index number. The certificates are listed in

 

alphabetical order.

 

 

Name

This field displays the name used to identify this certificate. It is recommended that

 

you give each certificate a unique name.

 

 

Type

This field displays what kind of certificate this is.

 

REQ represents a certification request and is not yet a valid certificate. Send a

 

certification request to a certification authority, which then issues a certificate. Use

 

the My Certificate Import screen to import the certificate and replace the request.

 

SELF represents a self-signed certificate.

 

CERT represents a certificate issued by a certification authority.

 

 

Subject

This field displays identifying information about the certificate’s owner, such as CN

 

(Common Name), OU (Organizational Unit or department), O (Organization or

 

company) and C (Country). It is recommended that each certificate have unique

 

subject information.

 

 

Issuer

This field displays identifying information about the certificate’s issuing certification

 

authority, such as a common name, organizational unit or department,

 

organization or company and country. With self-signed certificates, this is the

 

same information as in the Subject field.

 

 

Valid From

This field displays the date that the certificate becomes applicable.

 

 

Valid To

This field displays the date that the certificate expires. The text displays in red and

 

includes an Expired! message if the certificate has expired.

 

 

Add icon

Click the Add icon to go to the screen where you can have the ZyWALL generate

 

a certificate or a certification request.

 

Click the Edit icon to open a screen with an in-depth list of information about the

 

certificate.

 

The ZyWALL keeps all of your certificates unless you specifically delete them.

 

Uploading a new firmware or default configuration file does not delete your

 

certificates.

 

Click the Delete icon to remove a certificate. A window displays asking you to

 

confirm that you want to delete the certificate. Subsequent certificates move up by

 

one when you take this action.

 

You cannot delete certificates that any of the ZyWALL’s features are configured to

 

use.

 

 

Import

Click Import to open a screen where you can save a certificate to the ZyWALL.

 

 

Refresh

Click Refresh to display the current validity status of the certificates.

 

 

40.6.1 My Certificates Add Screen

Click Object > Certificate > My Certificates and then the Add icon to open the My Certificates Add screen. Use this screen to have the ZyWALL create a self-signed certificate, enroll a certificate with a certification authority or generate a certification request.

 

549

ZyWALL USG 300 User’s Guide