Netgear 05200007 User Manual

Page of 186
Reference Manual for the NETGEAR ProSafe VPN Client
6-14
Using the Certificate Manager
202-10015-01
In the Key Generation Options group, specify whether the private key associated with the 
personal certificate you're requesting can be exported to, for example, transfer it to another 
computer or make a backup copy. By default, the private key cannot be exported; the 
Generate exportable key check box is clear. To make the key exportable, select the Generate 
exportable key
 check box.
7.
To select the CSP or assign the default CSP, click Advanced.
8.
Click OK
For online certificate requests only: This submits your request. The Key Generation 
message box opens while the client generates a public/private key pair, and then closes. 
The Online Certificate Request message box opens when the client submits your 
request.
When the CA receives (accepts) your request, a confirmation message may open; click 
OK.
It may take some time for the CA to approve your request. The client checks the CA at a 
defined interval for approved personal certificates to retrieve. To change this polling 
interval, go to Define how often to check for personal certificates to retrieve.
For file-based certificate requests only: When a message box opens confirming that the 
certificate request file was created, click OK.
To find out how to send the certificate request file to the CA and receive the certificate file 
when the CA returns it; this process varies with each CA, contact the specific CA. 
Create a Personal Certificate File to Import
After you create and manually submit a personal certificate request file to a CA, and the CA 
approves the request, this CA returns a certificate to you in an email. You must create a certificate 
file from the email so that you can Import the personal certificate to the Certificate Manager.
The certificate request approval process varies with each CA. This is an example of the typical 
process:
1.
Submit the personal certificate request file you created, CertReq.req, to the CA, according to 
the instructions the CA or your network security administrator provides. 
When the CA approves your certificate request, it sends you an email that contains the 
certificate.
This is a sample email returned by the CA: