Certificates Import Menu Option
Certification
Authority (CA) (also referred as the Issuer) creates and issues certificates
using a PKI manager (software) and stores as a soft certificate. User
certificates are stored as a PKCS#12
file (user.p12
) in the installation
path. CA Root certificates must have a .cer
file extension and must be in DER format.
Execute the following command to export the certificate from the SRX Series device:
request security pki local-certificate export certificate-id xxx type der filename /var/tmp/filename.cer
Following is an example of converting a PEM formated/Base-64 certificate using OpenSSL.
openssl x509 -in /…/RootCA.pem -outform DER -out /…/RootCA.cer
Save the certificates in the application directory using files. On iOS email client, click and hold the certificate file until you see the Save to Files option. Now select Save to Files under Secure Connect folder location.
- Open the Juniper Secure Connect application and navigate to Diagnostics > Management > Certificates menu opton.
- Click the certificate of your choice to add to the iOS
keychain. Figure 1 shows an example
for successful importing of the certificates.
When the certificates have been imported into keychain, you can optionally view them under Diagnostics > Information > Certificates. At this page, you can also delete all imported certificates from the keychain by click on Delete Certificate Profiles.
We also recommend you to remove your user certificate from the local directory to secure the certificate.
- After import, you can view the imported certificates (in keychain) by choosing Diagnostics > Information > Certificates menu option.