Managing web certificates
You can manage web certificates in the Web Settings page:
• View certificate details.
• View certificate in PEM format.
• Replace a signed certificate by importing a certificate and private key or generating a self-signed certificate and new private key.
• Generate a certificate signing request (CSR).
To manage web certificates, select the Details tab under Web Certificate. These identity certificate details are available:
Issued To/Issued By
• Common Name—Specifies the common name of the certificate authority.
• Email—Specifies the email.
• Organization—Specifies the organization name (for example, the company).
• Organization Unit—Specifies the organization unit name (for example, section or department).
• Locality—Specifies the city.
• State—Specifies the state.
• Country—Specifies the country.
Validity
• Issued On—Specifies the date the certificate was issued.
• Expires On—Specifies the date the certificate expires.
Fingerprint
Specifies the SSL fingerprint.
Key
• Type—Specifies the key type.
• Size—Specifies the size, in bytes.
To view the certificate in PEM format, under Web Certificate, select the PEM tab to display the certificate. The certificate appears in PEM format.
To replace an existing certificate, under Web Certificate, click Replace. These configuration options are available:
Import Certificate and Private Key
Imports the certificate and key. The page displays controls for browsing to and uploading the certificate and key files. You can also use the text box to copy and paste a PEM file. The private key is required regardless of whether you’re adding or updating the certificate.
Certificate
• Upload—Browse to the local file in PKCS-12, PEM, or DER formats.
• Paste it here (PEM)—Copy and then paste the contents of a PEM file.
Private Key
Specifies the private key origin. The Private Key is in a separate file (see below)—You can either upload it or copy and paste it. This file includes the Certificate and Private Key. The Private Key for this Certificate was created with a CSR generated on this appliance.
Separate Private Key
• Upload (PEM or DER formats)—Browse to the local file in PEM or DER formats.
• Paste it here (PEM only)—Paste the contents of a PEM file.
• Decryption Password—Specify the decryption password, if necessary. Passwords are required for PKCS-12 files, optional for PEM files, and never needed for DER files.
Import Certificate and Key
Imports the certificate and key.
Generate Self-Signed Certificate and New Private Key
Generates a new private key and self-signed public certificate. The page displays controls to identify and generate the new certificate and key:
• Organization Name—Specify the organization name (for example, the company).
• Organization Unit Name—Specify the organization unit name (for example, the section or department).
• Locality—Specify the city.
• State (no abbreviations)—Specify the state.
• Country (2-letter code)—Specify the country (2-letter code only).
• Email Address—Specify the email address of the contact person.
• Validity Period (Days)—Specify how many days the certificate is valid.
Private Key
• Cipher Bits—Select the key length from the drop-down list. The default is 1024.
Generate Certificate and Key
Generates CSR and private key.
To generate a CSR, under Web Certificate select Generate CSR. These configuration options are available:
Common Name
Specifies the common name (hostname).
Organization Name
Specifies the organization name (for example, the company).
Organization Unit Name
Specifies the organization unit name (for example, the section or department).
Locality
Specifies the city.
State
Specifies the state.
Country
Specifies the country (two-letter code only).
Email Address
Specifies the email address of the contact person.
Generate CSR
Generates the CSR.