Netgear 05200007 User Manual
Reference Manual for the NETGEAR ProSafe VPN Client
Using the Certificate Manager
6-13
202-10015-01
Request a Personal Certificate
After you retrieve or import a CA certificate, you must request a personal certificate from this CA.
If your client was installed with a CA certificate, the Online Certificate Request or File-based
Certificate Request dialog box opens automatically the first time your computer restarts after client
installation.
If your client was installed with a CA certificate, the Online Certificate Request or File-based
Certificate Request dialog box opens automatically the first time your computer restarts after client
installation.
When the CA supports SCEP, submit the request online. For CAs that don't support SCEP, create a
certificate request to submit to the CA manually.
certificate request to submit to the CA manually.
Note: If you requested your CA certificate manually from CA that supports SCEP, and want to
request a personal certificate online, configure the CA certificate before requesting the personal
certificate.
request a personal certificate online, configure the CA certificate before requesting the personal
certificate.
1.
In the Certificate Manager, click the My Certificates tab.
2.
Click Request Certificate. The Online Certificate Request or File-based Certificate
Request dialog box opens.
Request dialog box opens.
3.
For online certificate requests only: In the Enrollment method group, make sure that Online is
selected.
selected.
4.
In the Subject Name group, complete the personal information boxes, as required by the CA.
Note: To use LDAP format when completing these boxes, select the Enter Subject Name in
LDAP format check box, and then go to Edit a distinguished name.
LDAP format check box, and then go to Edit a distinguished name.
5.
If this CA requires it, complete at least one box in the Subject Alternate Name group,
according to the CA's instructions. These boxes may be completed automatically.
according to the CA's instructions. These boxes may be completed automatically.
6.
For online certificate requests only: In the Online Request Information group, take these
steps:
steps:
a.
In the Challenge Phrase box, type an alphanumeric character string for the CA to confirm
your identity with if you ask to revoke your certificate. The CA makes sure that you are
the person the certificate says you are before rescinding your certificate. Record this
phrase.
your identity with if you ask to revoke your certificate. The CA makes sure that you are
the person the certificate says you are before rescinding your certificate. Record this
phrase.
b.
In the Confirm Challenge box, retype the challenge phrase.
c.
In the Issuing CA list, click the CA you are requesting the certificate from.
Caution: Make this selection carefully; you can't reverse your decision later.