Concept Guide

66 X.509v3.................................................................................................................................................. 1219
Introduction to X.509v3 certicates...........................................................................................................................1219
X.509v3 certicates............................................................................................................................................... 1219
Certicate authority (CA)...................................................................................................................................... 1219
Certicate signing requests (CSR).......................................................................................................................1219
How certicates are requested.............................................................................................................................1219
Advantages of X.509v3 certicates.................................................................................................................... 1220
X.509v3 support in ..................................................................................................................................................... 1220
Information about installing CA certicates.............................................................................................................. 1222
Installing CA certicate..........................................................................................................................................1222
Information about Creating Certicate Signing Requests (CSR)...........................................................................1222
Creating Certicate Signing Requests (CSR).....................................................................................................1223
Information about installing trusted certicates.......................................................................................................1224
Installing trusted certicates.................................................................................................................................1224
Transport layer security (TLS).................................................................................................................................... 1224
Syslog over TLS......................................................................................................................................................1225
Online Certicate Status Protocol (OSCP)...............................................................................................................1225
Conguring OCSP setting on CA.........................................................................................................................1225
Conguring OCSP behavior..................................................................................................................................1226
Conguring Revocation Behavior.........................................................................................................................1226
Conguring OSCP responder preference........................................................................................................... 1226
Verifying certicates.................................................................................................................................................... 1226
Verifying Server certicates..................................................................................................................................1227
Verifying Client Certicates...................................................................................................................................1227
Event logging................................................................................................................................................................ 1227
36
Contents