Administrator's Guide

Chapter 6. Basic Conﬁguration

Organization

The name of the organization/company owning the Telecommuting Module.

Organizational Unit

The department using the Telecommuting Module.

Serial number

If you generate more than one certiﬁcate with the same information, and you want to give

them separate names and treat them as different certiﬁcates, you need to give them different

serial number. Enter a serial number for this certiﬁcate here.

Challenge password

Enter a password. This will be used only when revoking a signed certiﬁcate.

Create a self-signed X.509 certiﬁcate

By entering the requested information above and pressing this button, you can create a cer-

tiﬁcate that isn’t signed by any certiﬁcate authority (CA). Self-signed certiﬁcates are for free,

while certiﬁcates signed by an ofﬁcial CA normally are not. Certiﬁcates signed by CAs are

automatically accepted by web browsers, while you have to accept self-signed certiﬁcates

manually when using them in your web browser.

Create an X.509 certiﬁcate request

When pressing this button, you make a certiﬁcate request which can be sent to a certiﬁcate

authority for signing. The request is downloaded under View/Download on the certiﬁcate

page. The signed certiﬁcate is uploaded under Import.

Abort

Press the Abort button to return to the Certiﬁcates page without creating a new certiﬁcate

or certiﬁcate request.

CA Certiﬁcates

Here, you upload CA certiﬁcates and CRLs (Certiﬁcate Revocation Lists).

The CAs are used to authenticate peers using IPsec VPN or TLS. Upload one or more CA

certiﬁcates here, and then select which CAs to trust for each function in the Telecommuting

Module.

CRLs are used to let the Telecommuting Module know that some of the certiﬁcates signed

by a certain CA should not be accepted. This could be useful when laptops with certiﬁcates

are stolen. See instructions for your CA on how to make a CRL.