Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Page de 568
Chapter 1      Customizing Listeners
1-38
Cisco IronPort AsyncOS 7.5 for Email Advanced Configuration Guide
OL-25137-01
Figure 1-16
The Edit Certificate Authorities Page
To see the trusted certificate authorities included in the system list, click View 
System Certificate Authorities
 on the Edit Certificate Authorities page.
Importing a Custom Certificate Authority List
You can create a custom of list trusted certificate authorities and import it onto the 
appliance. The file must be in the PEM format and include certificates for the 
certificate authorities that you want the appliance to trust. To import a list via the 
GUI, click Enable for the Custom List and enter the full path to the custom list 
on a local or network machine. Submit and commit your changes.
Disabling the System Certificate Authority List
The pre-installed system certificate authorities list cannot be removed from the 
appliance, but it can be disabled to allow the appliance to only use your custom 
list to verify certificates from remote hosts. To disable this list via the GUI, click 
Disable for the System List on the Edit Certificate Authorities page. Submit and 
commit your changes.
Exporting a Certficate Authorities List
If you want to use only a subset of the trusted certificate authorities in the system 
or edit an existing custom list, you can export the list to a .txt file and edit it to 
add or remove certificate authorities. After you have finished editing the list, 
import the file back onto the appliance as a custom list.
 shows the Export Certificate Authority List page in the GUI where 
you can export the system and custom lists.