ZyXEL Communications 1000 User Manual
Chapter 46 Certificates
ZyWALL USG 1000 User’s Guide
759
The following table describes the labels in this screen.
46.4 Certificates Technical Reference
OCSP
OCSP (Online Certificate Status Protocol) allows an application or device to check
whether a certificate is valid. With OCSP the ZyWALL checks the status of
individual certificates instead of downloading a Certificate Revocation List (CRL).
OCSP has two main advantages over a CRL. The first is real-time status
information. The second is a reduction in network traffic since the ZyWALL only
gets information on the certificates that it needs to verify, not a huge list. When
the ZyWALL requests certificate status information, the OCSP server returns a
“expired”, “current” or “unknown” response.
whether a certificate is valid. With OCSP the ZyWALL checks the status of
individual certificates instead of downloading a Certificate Revocation List (CRL).
OCSP has two main advantages over a CRL. The first is real-time status
information. The second is a reduction in network traffic since the ZyWALL only
gets information on the certificates that it needs to verify, not a huge list. When
the ZyWALL requests certificate status information, the OCSP server returns a
“expired”, “current” or “unknown” response.
Table 215 Configuration > Object > Certificate > Trusted Certificates > Import
LABEL
DESCRIPTION
File Path
Type in the location of the file you want to upload in this field or click Browse
to find it.
to find it.
You cannot import a certificate with the same name as a certificate that is
already in the ZyWALL.
already in the ZyWALL.
Browse Click
Browse to find the certificate file you want to upload.
OK
Click OK to save the certificate on the ZyWALL.
Cancel
Click Cancel to quit and return to the previous screen.