Managing Certificate Security

Viewing Certificate Details

Certificate management allows easy replacement of existing certificate and private key files with alternatives, which may be issued by a Certification Authority (CA). This feature enables you to deploy both server and client certificates seamlessly. Through the GUI, you can update certificates using unencrypted .pem-formatted certificate and private key files, integrating the private key with the corresponding signed certificate.

Procedure

Step 1

From the Navigation Pane, click Administration > Security Management.

Step 2

Under Certificate Management, you can view the following properties:

Name

Description

Certificate column

Displays the name or identifier of the certificate.

Issued by column

Shows the authority or entity that issued the certificate.

Issued to column

Indicates the recipient or entity to which the certificate was issued.

Valid from column

Start date of the certificate validity period.

Valid until column

End date of the certificate validity period.

Adding a New Certificate

Procedure

Step 1

From the Navigation Pane, click Administration > Security Management.

Step 2

Under Certificate Management, click Add new certificate.

Add new certificate window is displayed.

Step 3

In the Add new certificate window update the following properties:

Name

Description

Certificate type drop-down list

Select one of the following:

  • LDAP Certificate—Used to secure and authenticate LDAP connections. This certificate ensures encrypted communication between the system and the LDAP server.

  • HTTPS Certificate— Used to secure web-based communication over HTTPS. This certificate encrypts data exchanged between the client (browser) and the server, ensuring privacy and data integrity.

Add file button

Click Add file to browse and select the certificate file from the client.

Step 4

Click Add.

Replacing a Certificate

Procedure

Step 1

From the Navigation Pane, click Administration > Security Management.

Step 2

To replace a certificate, click the replace icon corresponding to the row you want to replace.

Replace certificate window is displayed.

Step 3

In the Replace certificate window, update the following properties:.

Name

Description

Certificate type field

You cannot change the certificate type.

Add file button

Click Add file to browse and select the certificate file from the client.

Step 4

Click Replace.

Deleting a Certificate

Procedure

Step 1

From the Navigation Pane, click Administration > Security Management.

Step 2

To delete a delete certificate, click the delete icon corresponding to the row you want to delete.

Step 3

Click Delete to confirm.

Generating a Certificate Signing Request

Procedure

Step 1

From the Navigation Pane, click Administration > Security Management.

Step 2

Under Certificate Management, click Generate CSR.

Generate a Certificate Signing Request (CSR) window is displayed.

Step 3

In the Generate a Certificate Signing Request (CSR) window update the following properties:

Name

Description

Certificate Type drop-down list

From the drop-down menu, choose one of the following options:

  • HTTPS Certificate—Use for securing web communications.

  • LDAP Certificate—Use for LDAP-related authentication.

Country/Region drop-down list

Select the country or region from the drop-down menu.

State field

Enter the state name.

City field

Enter the city name.

Company Name field

Enter the name of the company.

Company Unit field

Enter the unit within the company.

Common Name field

Enter the common name for the certificate.

Challenge password - optional

Enter a password to add an additional layer of security for the certificate. If no password is specified, the certificate can still be used without this added security.

Contact Person - optional field

Enter the name of the contact person.

Email Address - optional field

Enter the email address.

Alternate Name - optional field

Enter alternate names separated by spaces.

Private Key

Key Pair Algorithmdrop-down list

From the drop-down menu, choose one of the following:

  • EC—Elliptic Curve cryptography for higher security with shorter keys.

  • RSA—Rivest-Shamir-Adleman algorithm for a widely-used encryption method.

Step 4

Click Generate CSR to create the Certificate Signing Request.