Configuring Certificates (NSM Procedure)

The certificates feature allows you to configure the certification authority and local certificate.

To configure certificates feature:

In the NSM navigation tree, select Device Manager > Devices.
Click the Device Tree tab, and then double-click the device for which you want to configure the certificates feature.
Click the Configuration tab. In the configuration tree, select Security > Certificates.
Configure the options as specified in Table 99.
Click one:
- OK—Saves the changes.
- Cancel—Cancels the modifications.
- Apply—Applies the certificates parameters.

Table 99: Certificates Configuration Details

Option	Function	Your Action
Comment	Supplies a descriptive comment for the certificates.	(Optional) Enter a comment.
Path Length	Specifies the maximum length of the certificate path.	Set the maximum length of the certificate path. Range: 0 - 15.
Maximum Certificates	Specifies the maximum number of certificates to cache.	Set the maximum number of certificates. Range: 64 - 4,294,967,295.
Cache Size	Specifies the maximum size of certificate cache.	Enter the cache size.
Cache Timeout Negative	Specifies (in seconds) the time to cache negative responses.	Set the time to cache negative responses. Range: 10 - 4,294,967,295.
Enrollment Retry	Specifies the number of retry attempts for an enrollment request.	Set the number of retries. Range: 0 - 1080.

Configuring Certification Authority (NSM Procedure)

To configure the certification authority feature:

In the NSM navigation tree, select Device Manager > Devices.
Click the Device Tree tab, and then double-click the device for which you want to configure the certification authority feature.
Click the Configuration tab. In the configuration tree, select Security > Certificates > Certification Authority.
Add or modify settings as specified in Table 100.
Click one:
- OK—Saves the changes.
- Cancel—Cancels the modifications.
- Apply—Applies the certification authority settings.

Table 100: Certification Authority Configuration Details

Option	Function	Your Action
Name	Specifies the certification authority profile name.	Enter the certification authority profile name.
Comment	Supplies a descriptive comment for the certification authority. This is optional.	Enter a comment.
Ca Name	Specifies the certification authority name.	Enter the certification authority name.
File	Specifies the file from which to read the certificate.	Enter the path and the filename.
Crl	Specifies the file to read the CRL.	Enter the path and the CRL filename.
Enrollment Url	Specifies the enrollment URL.	Enter the enrollment URL.
Ldap Url	Specifies the LDAP URL.	Enter the LDAP URL.
Encoding	Specifies the encoding to be used for the certificate or CRL on disk.	Select the encoding type from the list.

To configure the local certificate feature:

In the NSM navigation tree, select Device Manager > Devices.
Click the Device Tree tab, and then double-click the device for which you want to configure the local certificate feature.
Click the Configuration tab. In the configuration tree, select Security > Certificates > Local.
Add or modify settings as specified in Table 101.
Click one:
- OK—Saves the changes.
- Cancel—Cancels the modifications.
- Apply—Applies the local settings.

Table 101: Local Configuration Details

Option	Function	Your Action
Name	Specifies the name of the certificate.	Enter a name.
Comment	Supplies a descriptive comment for the certificate.	(Optional) Enter a comment.
Certificate	Specifies the certificate and the private key.	Enter a private key for the certificate.