User guide

SSL Client Certificate
92
Enabling Client Certificate Authentication:
ToenableClientCertificateAuthentication:
1. ClickEnableSSLClientCertification.
2. ClickOKtoenabletheClientCertificateauthentication.
Installing a New Trusted Certificate Authority
ToinstallanewtrustedCertificateAuthority(CA)totheDSX,theCA
certificatemustbeonanaccessibleFTPserver.
1. ClickInstallCertificateAuthority.
2. FillinthedataneededtoretrievethecertificatefromtheFTPserver.
3. ClickOKtoretrieveandinstalltheCAcertificatetotheDSX.
Removing a User-Added Certificate Authority
Toremoveauser‐addedCAfromtheDSX:
1. ClickRemoveCertificateAuthority.
2. IntheCANamefield,typethenamethatwasspecifiedwhentheCA
certificatewasadded.
3. ClickOKtoremovethecertificate.
Viewing a Certificate Authority
ToviewaCA:
1. ClickViewCertificateAuthority.
2. IntheCANamefield,typethenameoftheCAyouwanttoview.
3. ClickOKtoretrievethelistofCAs.
Managing the Client Certificate Revocation List (CRL)
TheDSXcomeswithVeriSignandThawteCAcertificatesandCRLs
preinstalled.IfauseraddsacustomCAtotheDSX,acorrespondingCRL
shouldbeaddedtokeeptrackofrevokedcertificates.FortheCRLtobe
automaticallyretrievedwhenexpired,itshouldberetrievablefromaweb
servertha
ttheDSXca
nconnectto.