User Manual Part 3

System Configuration
4-9
Depending on the public key infrastructure, the digital certificate includes the owner's public key, the
certificate expiration date, the owner's name and other public key owner information.
The access point can import and maintain a set of CA certificates to use as an authentication option
for Virtual Private Network (VPN) access. To use the certificate for a VPN tunnel, define a tunnel and
select the IKE settings to use either RSA or DES certificates. For additional information on configuring
VPN tunnels, see Configuring VPN Tunnels on page 6-33.
Refer to your access point network administrator to obtain a CA certificate to import into the access
point.
To import a CA certificate:
1. Select System Configuration -> Certificate Mgmt -> CA Certificates from the access
point menu tree.
CAUTION Loaded and signed CA certificates will be lost when changing the
access point’s firmware version using either the GUI or CLI. After a
certificate has been successfully loaded, export it to a secure location
to ensure its availability after a firmware update.
NOTE Verify the access point device time is synchronized with an NTP server
before importing a certificate to avoid issues with conflicting date/time
stamps. For more information, see Configuring Network Time Protocol
(NTP) on page 4-31.
!