User`s guide

Digi device administration
154
Secure Sockets Layer (SSL) / Transport Layer Security (TLS) Certificates
The Secure Sockets Layer (SSL) and Transport Layer Security (TLS) databases are used to
load host certificates and keys, as well as peer certificates and revocations.
 Identity Certificates and Keys
– Upload SSL/TLS Identity Keys and Certificates: use this section to upload SSL/TLS
RSA or DSA identity keys and certificates. Identity certificate and key files may be in
ASN.1 DER or PEM Base64 encoded formats. If the host key file is encrypted, a
password is required.
– Installed SSL and TLS Identity Certificates: lists the identity certificates that are
installed in the SSL and TLS databases.
– Installed SSL/TLS Identity Keys: Lists the identity keys that are installed in the SSL
and TLS databases.
 Trusted Peer Certificates
– Upload SSL/TLS Trusted Peer Certificates: Use this section to upload SSL/TLS
trusted peer certificate files. Files may be in ASN.1 DER or PEM Base64 encoded
formats.
– Installed SSL/TLS Trusted Peer Certificates: Lists the trusted peer certificates that
have been loaded into the SSL and TLS databases.
 Untrusted Revoked Certificates
– Upload SSL/TLS Untrusted Revoked Certificates: Use this section to upload SSL/
TLS untrusted revoked certificates to the database. Files may be in ASN.1 DER or PEM
Base64 encoded formats.
– Installed SSL/TLS Untrusted Revoked Certificates: Lists the untrusted revoked
certificates that have been loaded into the SSL and TLS databases
Secure Shell (SSH) Hostkeys
The Secure Shell (SSHv2) Hostkeys database is used to load host private keys. SSHv2 host keys
are used for authentication with SSHv2 clients and secure key exchange. A default 1024-bit DSA
key is generated automatically if none exists when the device boots.
 Upload SSH Host Keys: Use this section to upload SSH RSA or DSA hostkeys. Key
files may be in ASN.1 DER or PEM Base64 encoded formats. If the host key file is
encrypted, a password is required.
 Installed SSH Host Keys: Lists the host keys that have been loaded into the SSH
Hostkeys database.