Concept Guide

Certicate authority (CA).......................................................................................................................................1187
Certicate signing requests (CSR)....................................................................................................................... 1187
How certicates are requested............................................................................................................................. 1187
Advantages of X.509v3 certicates.....................................................................................................................1188
X.509v3 support in ...................................................................................................................................................... 1188
Information about installing CA certicates...............................................................................................................1190
Installing CA certicate.......................................................................................................................................... 1190
Information about Creating Certicate Signing Requests (CSR)........................................................................... 1190
Creating Certicate Signing Requests (CSR)...................................................................................................... 1191
Information about installing trusted certicates........................................................................................................1192
Installing trusted certicates................................................................................................................................. 1192
Transport layer security (TLS).....................................................................................................................................1192
Syslog over TLS...................................................................................................................................................... 1193
Online Certicate Status Protocol (OSCP)............................................................................................................... 1193
Conguring OCSP setting on CA..........................................................................................................................1193
Conguring OCSP behavior...................................................................................................................................1194
Conguring Revocation Behavior......................................................................................................................... 1194
Conguring OSCP responder preference............................................................................................................ 1194
Verifying certicates.....................................................................................................................................................1194
Verifying Server certicates..................................................................................................................................1195
Verifying Client Certicates...................................................................................................................................1195
Event logging.................................................................................................................................................................1195
36
Contents