TMS zl Management and Configuration Guide ST.1.2.100916

B-4
Glossary
C
CA Certificate Authority. An entity that issues digital certificates and acts as a
trusted third party that verifies the identity of parties that want to communi-
cate with one another.
CA certificate A certificate that is issued by a CA that validates all other certificates that are
issued by the CA. Also called a “CA root certificate.” You store CA certificates
in VPN > Certificates > CA Certificates.
certificate An electronic document that contains a public key and is digitally signed by a
third-party issuer such as a CA. Digital certificates are used for network
authentication. They contain the certificate holder’s name or other identifying
information, a serial number, the expiration date, and a copy of the certificate
holder’s public key, which validates data signed by the corresponding private
key. Also called “IPsec certificate.”
certificate
authority
See CA.
certificate
request
An electronic document that an endpoint sends to a CA to obtain a self
certificate (IPsec certificate) from the CA that will verify the endpoint’s iden-
tity.
certificate
revocation list
See CRL.
challenge
password
The password that you must input when creating a certificate request through
SCEP.
CHAP Challenge Handshake Authentication Protocol. An authentication protocol
that is supported by PPP and also incorporated in RADIUS. With CHAP, the
authenticator sends the client a “challenge” text. The client creates a hash
value from its pre-shared password and the text. The authenticator also
creates a hash value from the same text. The authenticator compares the hash
values. If they match, authentication succeeds and the link is established. For
more information, see RFC 2759 at http://www.ietf.org/rfc/rfc2759.txt.
chassis The switch frame where the circuit components are mounted.
CIDR Classless Inter-Domain Routing. A method of interpreting IP addresses that
allows for blocks of addresses to appear in a single routing table entry. For
example, 10.2.0.40 /24 indicates a 24-bit subnet mask, or 255.255.255.0. For
more information, see RFC 1518 at http://www.ietf.org/rfc/rfc1518.txt.