Filter
Top Products
Chapter 21 CNM System Setting
Vantage CNM User’s Guide
319
A certification path is the hierarchy of certification authority certificates that validate a
certificate. The device does not trust a certificate if any certificate on its path has expired or
been revoked.
Certification authorities maintain directory servers with databases of valid and revoked
certificates. A directory of certificates that have been revoked before the scheduled expiration
is called a CRL (Certificate Revocation List). The device can check a peer's certificate against
a directory server's list of revoked certificates. The framework of servers, software, procedures
and policies that handles keys is called PKI (public-key infrastructure).
21.7.1 Advantages of Certificates
The device only has to store the certificates of the certification authorities that you decide to
trust, no matter how many devices you need to authenticate.
Key distribution is simple and very secure since you can freely distribute public keys and you
never need to transmit private keys.
21.7.2 Current Certificate Information
You can view your current certificate information in this screen, including certificate name,
type, origin and duration of validity.
Figure 181 CNM System Setting > Configuration > Certificate Management