Managing Certificate Authority Group

Starting in Junos OS 19.2R1 Release, Certificate Authority Group page is available and you can navigate to this page from Administration > Certificate Management > Certificate Authority Group.

For SSL forward proxy, you need to load trusted CA certificates on your system. By default, Junos OS provides a list of trusted CA certificates that include default certificates used by common browsers. Alternatively, you can define your own list of trusted CA certificates and import them on to your system.

Table 301 provides the details of the fields of the Certificate Authority Group Page

You can perform the following tasks:

• Import a CA group to manually load the CA group. See Importing a Trusted Certificate Authority Group.

• Add a CA group. See Adding a Certificate Authority Group.

  Note You can group up to maximum of 20 CA profiles in a single trusted CA group. A minimum of one CA profile is a must to create a trusted CA group.

• Edit a CA group. See Editing a Certificate Authority Group.

• Delete a CA group. See Deleting a Certificate Authority Group.

• Search for text in a CA group table. See Search Text in Certificate Authority Group Table.

• Filter the CA group information based on select criteria. To do this, select the filter icon at the top right-hand corner of the table. The columns in the grid change to accept filter options. Type the filter options; the table displays only the data that fits the filtering criteria.

• Show or hide columns in the CA group table. To do this, use the Show Hide Columns icon in the top right corner of the page and select the options you want to show or deselect to hide options on the page.

Importing a Trusted Certificate Authority Group

Procedure

1. Select Administration > Certificate Management > Certificate Authority Group.
2. Click Import.

   The Import Trusted CA Group page appears.

3. Complete the configuration according to the guidelines provided in Table 302.
4. Click OK to import the CA group.

   You are taken to the Certificate Authority Group page. If the CA group content that you imported is validated successfully, a confirmation message is displayed; if not, an error message is displayed.

   After importing a CA profile group, you can use it when you create a SSL proxy.

Adding a Certificate Authority Group

Procedure

1. Select Administration > Certificate Management > Certificate Authority Group.
2. Click the add icon (+).

   The Add CA Group page appears.

3. Complete the configuration according to the guidelines provided in Table 303.
4. Click OK to save the changes. If you want to discard your changes, click Cancel instead.

   If you click OK, a new CA group with the provided configuration is created.

   After added a CA group, you can use it for IPSec VPN.

Editing a Certificate Authority Group

Procedure

1. Select Administration > Certificate Management > Certificate Authority Group.
2. Select a CA group.
3. On the upper right side of the Certificate Authority Group page, click the pencil icon.

   See Table 303 for the options available for editing on the Edit CA Group page.

4. Click OK

Deleting a Certificate Authority Group

Procedure

1. Select Administration > Certificate Management > Certificate Authority Group.
2. Select a CA group.
3. On the upper right side of the Certificate Authority Group page, click the delete icon to delete.

   A confirmation window appears.

4. Click Yes to delete.

Search Text in Certificate Authority Group Table

You can use the search icon in the top right corner of a page to search for text containing letters and special characters on that page.

Procedure

1. Enter partial text or full text of the keyword in the search bar and click the search icon.

   The search results are displayed.

2. Click X next to a search keyword or click Clear All to clear the search results.

See Also

• Managing Device Certificates

• Managing Trusted Certificate Authority