User manual

Security
TPG User Manual 56
authority. The root certificate is stored on an authentication
server in the network.
• Upon delivery, a certificate (the so-called default certificate) is
stored in the TPG. It is recommended that you replace the
default certificate by a self-signed certificate or CA certificate as
soon as possible.
• S/MIME certificate
S/MIME certificates (*.pem file) are used to sign and encrypt the
emails that are sent by the TPG. The corresponding private key
must be installed as an own certificate in the pkcs(12) format (as
*.p12 file) in the intended email program (Thunderbird, Outlook,
etc.). Only then can the emails be verified and displayed (in the
case of encryption).
The following certificates can be installed at the same time in the
TPG:
- 1 Self-signed certificate
- 1 CA certificate or pkcs(12) certificate
- 1 Root certificate
- 1 S/MIME certificate
You can also generate a certificate request for a CA certificate. All
certificates can be deleted separately. Existing certificates will be
overridden when installing or generating new certificates.
A pkcs(12) certificate can only be installed if there are currently no
certificate requests or CA certificates installed.
Fig. 6: TPG Control Center - Certificates