User's Manual

Reference Manual for the NETGEAR ProSafe VPN Client
Using the Certificate Manager 6-5
202-10015-01
Table 6-1.
Retrieve a CA Certificate Online
Before you can request a personal certificate online, you must retrieve a CA certificate—root or
subordinate—online. For a list of the CAs that offer online retrieval, go to CAs that support SCEP.
When you retrieve a CA certificate online, the CA may also include registration authority (RA)
certificates, which you can view or verify in the Certificate Manager.
Note: If you access the Internet through a firewall, make sure that the Use HTTP proxy server for
online certificate requests and CRL updates check box check box is selected on the Certificate
Settings dialog box in the Security Policy Editor.
1. In the Certificate Manager, click the tab for the CA certificate type to retrieve:
• For a root CA certificate, Root CA Certificates
• For a subordinate CA certificate, CA Certificates
2. Click Retrieve CA Certificate. The Retrieve CA Certificate Online dialog box opens.
3. In the CA Domain box, type the CA's domain name, such as abc123.com.
4. In the Online Certificate Server box, type the complete URL, including the schema, such as
http://, of the CA's certificate server.
5. Unless your network security administrator instructs you otherwise, leave the Place
certificate in local machine store check box selected (the default). This adds the certificate to
the store for all users who log on to this computer (local machine).
Caution! In Windows NT and Windows 2000 and XP, you must be logged on as
administrator or its equivalent to add this certificate to the local machine store.
Certificate Authority Telephone Web site
Entrust Technologies, Inc [phone]
www.entrust.com
iPlanet [phone]
www.iplanet.com
Microsoft Corporation [phone]
www.microsoft.com
RSA Security (Keon) [phone]
www.rsasecurity.com
VeriSign, Inc. [phone]
www.verisign.com