Server Certificates (requires Level 15 permission)

Use this page (Configuration > Certificate Management > Server Certificates) to manage the site's Server Certificates. The list shows the imported Server Certificates that your site has obtained and information about the certificate such as 

• Status: Certificate is valid, pending, etc.
• Certificate Alias: Name of the certificate
• Issued To: Entity receiving the certificate
• Issued By: Entity that issued the certificate 
• Expiration Date: Date the certificate expires
• Used By: Application using the certificate

Click Refresh at any time to redisplay the table.

Add a Server Certificate

To create a Server Certificate that contains the entity's identity and a private key, to be sent to an outside CA authority or generated locally:

1. Click Add. The Certificate Add dialog displays.
2. Click the radio button for the type of certificate to create:
   • Create a Certificate Signing Request (CSR) to be signed by a CA: Use this option to create a CSR that will be applied to a third-party CA. 
   • Create a Self-Signed Certificate: The certificate is generated locally.
3. In the Certificate Alias box, enter the name for the certificate using 1 to 31 alphanumeric characters (do not use spaces).
4. In the Private Key Password box, enter the private password using a maximum of 64 characters.
5. Retype the password in the Confirm Private Key Password box.
6. In the Validity box, enter the number of days (1 - 9999) the certificate should be valid.
7. Enter a Common Name that describes the certificate's use in the text box using a maximum of 64 characters. 
   
   Spaces and special characters should not be used in the Common Name if the certificate is to be used for Web Administration (see "Assigning the Server Certificate to User Applications").
8. Enter the Organization Name using the certificate in the box using a maximum of 64 characters.
9. Enter the location in the Locality Name box. using a maximum of 64 characters
10. Enter the State or Province Name in the box using a maximum of 64 characters.
11. Enter the Country Code in the box (2 letters). 
12. Enter a valid email address in the E-mail Address box.
13. Optionally, to select alternate encryption schemes, or usage criteria, click Advanced or continue.
14. Click Apply. 
    • For a self-signed certificate, a confirmation dialog displays, click OK. 
    • For a CSR request, a CSR Display dialog opens. You can copy the Certificate PEM for pasting into a submittal form or click Save to save the CSR info using a standard File Save Location dialog.
15. Click Close.

View Pending Server Certificates

To check the CSRs that are awaiting verifications, click Pending CSRs.

Import a Server Certificate

Before Server Certificates can be imported, the associated Root CA Certificate (along with any CA certificates in path) of the Server Certificate must be obtained and imported into the system (click Trusted Root CA and Help, and follow the instructions for "Importing a CA Certificate").   

To bring a validated CSR  into the system:

1. Follow the steps to Add A Server Certificate with the option to Create a Certificate Signing Request (CSR) to be signed by a CA to obtain a Server Certificate.
2. Click Pending CSRs.
3. Click Import. 
4. Click the Include Chain of Trust checkbox to include the entire trust hierarchy.
5. Obtain the certificate:
   • Click Browse  to navigate to the certificate location, select the certificate, and click Open
   • Copy the Certificate PEM data and paste it into the Certificate PEM window
6. Click Import to bring the certificate into the system.
7. Click Close.

Assigning the Server Certificate to User Applications

To assign the Server Certificate for use by Captive Portal or Web Administration & Management Application:

1. Highlight the Certificate in the Server Certificates list.
2. Click Used By. The User Applications dialog opens.
3. Click to select the Captive Portal or Web Administration & Management Application entry or Shift-Click to select both.
4. Click Apply.
5. Click Close.

To change assignments, repeat this procedure selecting a different use.

Viewing a Server Certificate

To view details of a Server Certificate:

1. Highlight the Certificate in the certificates list.
2. Click View. The Certificate Information dialog opens.
3. Click the General or Details tab to see information about the certificate.
4. Click Close.

Exporting a Server  Certificate

To save a Server  Certificate to another location: 

1. Highlight the Certificate in the certificates list.
2. Click Export. The Certificate Export dialog opens.
3. Click Export. The File Save Location dialog opens, navigate to the save location and click Save.
4. Click Close.

Deleting a Server  Certificate

To delete a Server  Certificate:

1. Highlight the Certificate in the certificates list.
2. Click Delete.
3. Click OK twice to verify deletion.
4. The certificate is removed from the table.