Figure 482: Add Certificate Authority
6. Click Save.
Download CA
You can download local CAs in order to forward these to the remote peer for the verification process.
1. Go to System > Certificates > Certificate Authorities.
2.
Click to download the zip file.
Update Default CA
Edit Default CA Parameters allows you to edit the default certificate authority details.
1. Go to System > Certificates > Certificate Authorities.
2.
Go to the Manage column and click against the default certificate.
3. The name of the CA cannot be changed for default CA.
4. Select the country in which the device is deployed.
5. Enter the state within the country.
6. Enter the locality in which the certificate is to be used.
7. Enter the name of the certificate owner (example: Sophos Group).
8. Enter the name of the department to which the certificate is to be assigned (example: marketing).
9. Enter the common name or FQDN (example: marketing.sophos.com).
10. Enter the contact person's email address.
11. Enter the CA passphrase and re-enter to confirm.
12. Click Save.
Regenerate Certificate Authority
1. Go to System > Certificates > Certificate Authorities.
2.
To regenerate the default certificate, go to the Manage column and click .
Note: When you update the default CA, it is automatically regenerated.
Certificate Revocation Lists
Certificates can be revoked when the key or CA has been compromised, or the certificate is no longer valid for the original purpose. CAs maintain a list of revoked certificates.
You can upload Certificate Revocation List (CRL) of an external CA. Self-signed certificates that are revoked are automatically added to the CRL.
| System | 517
