TMS zl Management and Configuration Guide ST.1.1.100430

7-48
Virtual Private Networks
Configure an IPsec Client-to-Site VPN
7. Click Apply My Changes.
8. Click Save.
9. Next, you must import the CA certificate. Click the Certificate
Authorities tab.
Figure 7-32. VPN > Certificates > Certificate Authorities Window
10. Click Retrieve certificate through SCEP.
The CA root certificate is displayed in the VPN > Certificates > Certificate
Authorities window. (If the certificate is not imported, check the IP address or
FQDN that you set in step 3.)
11. Ask your CA administrator if you need a particular CGI path to the CRL
distribution point. If you do, follow these steps:
a. Click the SCEP tab.
b. For CGI-Path, type the new path given to you by your CA.
For example, for a Windows 2008 CA, you might type /CertEnroll/
<domainname-CAname>.crl.
c. Click Apply My Changes.
Figure 7-33. VPN > Certificates > Certificate Authorities Window
12. Click the CRL tab.