Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Configuring Certificates (NSM Procedure)

    The certificates feature allows you to configure the certification authority and local certificate.

    To configure certificates feature:

    1. In the NSM navigation tree, select Device Manager > Devices.
    2. Click the Device Tree tab, and then double-click the device for which you want to configure the certificates feature.
    3. Click the Configuration tab. In the configuration tree, select Security > Certificates.
    4. Configure the options as specified in Table 1.
    5. Click one:
      • OK—Saves the changes.
      • Cancel—Cancels the modifications.
      • Apply—Applies the certificates parameters.

    Table 1: Certificates Configuration Details

    OptionFunctionYour Action

    Comment

    Supplies a descriptive comment for the certificates.

    (Optional) Enter a comment.

    Path Length

    Specifies the maximum length of the certificate path.

    Set the maximum length of the certificate path. Range: 0 - 15.

    Maximum Certificates

    Specifies the maximum number of certificates to cache.

    Set the maximum number of certificates. Range: 64 - 4,294,967,295.

    Cache Size

    Specifies the maximum size of certificate cache.

    Enter the cache size.

    Cache Timeout Negative

    Specifies (in seconds) the time to cache negative responses.

    Set the time to cache negative responses. Range: 10 - 4,294,967,295.

    Enrollment Retry

    Specifies the number of retry attempts for an enrollment request.

    Set the number of retries. Range: 0 - 1080.

    Configuring Certification Authority (NSM Procedure)

    To configure the certification authority feature:

    1. In the NSM navigation tree, select Device Manager > Devices.
    2. Click the Device Tree tab, and then double-click the device for which you want to configure the certification authority feature.
    3. Click the Configuration tab. In the configuration tree, select Security > Certificates > Certification Authority.
    4. Add or modify settings as specified in Table 2.
    5. Click one:
      • OK—Saves the changes.
      • Cancel—Cancels the modifications.
      • Apply—Applies the certification authority settings.

    Table 2: Certification Authority Configuration Details

    OptionFunctionYour Action

    Name

    Specifies the certification authority profile name.

    Enter the certification authority profile name.

    Comment

    Supplies a descriptive comment for the certification authority. This is optional.

    Enter a comment.

    Ca Name

    Specifies the certification authority name.

    Enter the certification authority name.

    File

    Specifies the file from which to read the certificate.

    Enter the path and the filename.

    Crl

    Specifies the file to read the CRL.

    Enter the path and the CRL filename.

    Enrollment Url

    Specifies the enrollment URL.

    Enter the enrollment URL.

    Ldap Url

    Specifies the LDAP URL.

    Enter the LDAP URL.

    Encoding

    Specifies the encoding to be used for the certificate or CRL on disk.

    Select the encoding type from the list.

    Configuring the Local Certificate (NSM Procedure)

    To configure the local certificate feature:

    1. In the NSM navigation tree, select Device Manager > Devices.
    2. Click the Device Tree tab, and then double-click the device for which you want to configure the local certificate feature.
    3. Click the Configuration tab. In the configuration tree, select Security > Certificates > Local.
    4. Add or modify settings as specified in Table 3.
    5. Click one:
      • OK—Saves the changes.
      • Cancel—Cancels the modifications.
      • Apply—Applies the local settings.

    Table 3: Local Configuration Details

    OptionFunctionYour Action

    Name

    Specifies the name of the certificate.

    Enter a name.

    Comment

    Supplies a descriptive comment for the certificate.

    (Optional) Enter a comment.

    Certificate

    Specifies the certificate and the private key.

    Enter a private key for the certificate.

    Published: 2013-01-06