Setup Guide

66 X.509v3.................................................................................................................................................. 1221
Introduction to X.509v3 certicates...........................................................................................................................1221
X.509v3 certicates............................................................................................................................................... 1221
Certicate authority (CA)...................................................................................................................................... 1221
Certicate signing requests (CSR)....................................................................................................................... 1221
How certicates are requested............................................................................................................................. 1221
Advantages of X.509v3 certicates.................................................................................................................... 1222
X.509v3 support in ......................................................................................................................................................1222
Information about installing CA certicates.............................................................................................................. 1224
Installing CA certicate..........................................................................................................................................1224
Information about Creating Certicate Signing Requests (CSR)...........................................................................1224
Creating Certicate Signing Requests (CSR).....................................................................................................1225
Information about installing trusted certicates.......................................................................................................1226
Installing trusted certicates.................................................................................................................................1226
Transport layer security (TLS)....................................................................................................................................1226
Syslog over TLS......................................................................................................................................................1227
Online Certicate Status Protocol (OSCP)...............................................................................................................1227
Conguring OCSP setting on CA......................................................................................................................... 1227
Conguring OCSP behavior..................................................................................................................................1228
Conguring Revocation Behavior.........................................................................................................................1228
Conguring OSCP responder preference........................................................................................................... 1228
Verifying certicates.................................................................................................................................................... 1228
Verifying Server certicates................................................................................................................................. 1229
Verifying Client Certicates.................................................................................................................................. 1229
Event logging................................................................................................................................................................ 1229
36
Contents