Manage Certificates

Useful functions for managing certificates are available on the toolbar as listed below.

A close-up of a log Description automatically generated

  1. Retrieve Information: Obtains all certificate information from a device.

  1. Create a Self-Signed Certificate: Creates a self-signed certificate. On the Certificate Information screen that is displayed, enter Common Name, Organization, Organizational Unit, E-mail Address, City/Locality, State/Province, Country Code, Effective Date, validity period, and Algorithm Signature. The Common Name must be unique.

  1. Create CSR: Creates a CSR to be downloaded and stored in the local application cache.

On the Certificate Signing Request screen that appears, enter a Common Name, Organization, Organizational Unit, E-mail Address, City/Locality, State/Province, Country (Country Code), Effective Date, validity period, and Signing Algorithm.

If creating a certificate when using an Active Directory Certificate Authority, use the Addiitonal Attriubtes field to specify attributes that should be sent to the certificate authority. For example, san:dns=dns.name[&dns=dns.name]. Separate multiple DNS names with an ampersand character &.

  1. Install Certificate: Uploads and installs the local certificate that is associated with the selected device or certificate number to the device.

  1. Install Intermediate Certificate: Uploads the local certificate that is associated with the selected device or certificate number.

  1. Delete Certificate: Deletes the certificate of the specified certificate number from the selected device.

  1. Display CSR: Use this item to copy the displayed value to the certificate generation program. This is available when only one device is selected.

If the selected device or certificate number does not contain CSR data, an error message is displayed.

  1. Associate Certificate to CSR: Imports a certificate to be installed to a specified device or certificate number. This is available when only one device is selected.

  1. Import Intermediate Certificate: Use this item to import an intermediate certificate file when the SCEP server to display the intermediate certificate is unavailable, or use the item to copy the certificate information to the "Import Intermediate Certificate" screen.

  • WARNING: A common name is typically the DNS name or IP address of the device. SSL server certificates are specific to the common name that they were issued to, so it is important that the common name is the same as the address that will be used when accessing the device.

  • Check whether an execution of the task has succeeded or failed in the "Log" pane.