Chapter 29 Object
USG20(W)-VPN Series User’s Guide
525
The following table describes the labels in this screen.
29.10.4.1 The Trusted Certificates Edit Screen
Click
Configuration > Object > Certificate > Trusted Certificates
and then a certificate’s
Edit
icon to open the
Trusted Certificates Edit
screen. Use this screen to view in-depth information
about the certificate, change the certificate’s name and set whether or not you want the USG to
check a certification authority’s list of revoked certificates before trusting a certificate issued by the
certification authority.
Table 222
Configuration > Object > Certificate > Trusted Certificates
LABEL
DESCRIPTION
PKI Storage
Space in Use
This bar displays the percentage of the USG’s PKI storage space that is currently in use.
When the storage space is almost full, you should consider deleting expired or
unnecessary certificates before adding more certificates.
Edit
Double-click an entry or select it and click
Edit
to open a screen with an in-depth list of
information about the certificate.
Remove
The USG keeps all of your certificates unless you specifically delete them. Uploading a
new firmware or default configuration file does not delete your certificates. To remove an
entry, select it and click
Remove
. The USG confirms you want to remove it before doing
so. Subsequent certificates move up by one when you take this action.
Object
References
You cannot delete certificates that any of the USG’s features are configured to use. Select
an entry and click
Object Reference
s to open a screen that shows which settings use
the entry.
#
This field displays the certificate index number. The certificates are listed in alphabetical
order.
Name
This field displays the name used to identify this certificate.
Subject
This field displays identifying information about the certificate’s owner, such as CN
(Common Name), OU (Organizational Unit or department), O (Organization or company)
and C (Country). It is recommended that each certificate have unique subject
information.
Issuer
This field displays identifying information about the certificate’s issuing certification
authority, such as a common name, organizational unit or department, organization or
company and country. With self-signed certificates, this is the same information as in the
Subject
field.
Valid From
This field displays the date that the certificate becomes applicable.
Valid To
This field displays the date that the certificate expires. The text displays in red and
includes an Expired! message if the certificate has expired.
Import
Click
Import
to open a screen where you can save the certificate of a certification
authority that you trust, from your computer to the USG.
Refresh
Click this button to display the current validity status of the certificates.
Summary of Contents for ZyWall USG20-VPN
Page 17: ...17 PART I User s Guide ...
Page 18: ...18 ...
Page 99: ...99 PART II Technical Reference ...
Page 100: ...100 ...
