Sophos XG Firewall Web Interface Reference and Admin Guide v16.5

| System | 516 b) Enter the state within the country.

c) Enter the locality in which the certificate is to be used.

d) Enter the name of the certificate owner (example: Sophos Group).

e) Enter the name of the department to which the certificate is to be assigned (example: marketing).

f) Enter the common name or FQDN (example: marketing.sophos.com).

g) Enter the contact person's email address.

5. Click Save.

Once the certificate is created, you need to download and send this certificate to the remote peer with whom the connection is to be established.

Download Certificate

The device allows you to download self-signed certificates and certificate signing requests.

1. Go to System > Certificates > Certificates.

2.

Go to the Manage column and click against the certificate. The certificate is downloaded as a .tar.gz file.

Revoke Certificate

1. Go to System > Certificates > Certificates.

2.

Go to the Manage column and click signed certificates.

against the certificate. You can revoke lost, stolen or updated self-

Revoked certificates are automatically added to the Certificate Revocation List (CRL).

Certificate Authorities

Certificate Authorities (CA) are trusted entities which issue digital certificates that verify the ownership of a user, host or organization. Ownership is verified through a public key, owner information and a private key.

The device allows you to generate a local CA or to import external CAs. Among external CAs, it provides Verisign,

Entrust and Microsoft.

The default CA is regenerated automatically when it is updated.

Add Certificate Authority

1. Go to System > Certificates > Certificate Authorities and click Add.

2. Enter the name of the CA.

3. Select the format of the root certificate. The certificate and private key are stored in different files.

4. Upload the certificate and private key.

5. Enter the CA passphrase and re-enter to confirm.