Netgear 05200007 사용자 설명서

다운로드
페이지 186
Reference Manual for the NETGEAR ProSafe VPN Client
6-8
Using the Certificate Manager
202-10015-01
4.
Unless your network security administrator instructs you to change it, leave the Import 
certificate to local machine store
 check box selected (the default). 
Caution: In Windows NT and Windows 2000 and XP, you must be logged on as 
administrator or its equivalent to add this certificate to the local machine store (for all users 
who log on to this computer).
5.
Click Import.
6.
When a confirmation message box opens, click Yes.
Select a CSP
You can select a cryptographic service provider (CSP) when requesting a personal certificate, 
regardless of the method. You can also designate a default CSP to use for all personal certificate 
requests.
1.
In the Security Policy Editor, click Options>Certificate Settings. The Online or File-based 
Certificate Request
 dialog box opens.
2.
Click Advanced. The Advanced Certificate Enrollment Settings dialog box opens.
3.
Click the specific CSP in the list.
4.
If the Key Size box is enabled, click the key size to use.
5.
To designate the settings on this dialog box as the default for all personal certificate requests, 
select the Save as default CSP settings check box.
6.
By default, the Place certificate and keys in local machine store check box is clear, which 
places the imported certificate in your—the logged-on user's—personal certificate store. 
Unless your network security administrator instructs you to change it, accept the default.
Caution: In Windows NT and Windows 2000 and XP, you must be logged on as 
administrator or its equivalent to add this certificate to the local machine store. 
7.
Click OK.
Request a Personal Certificate
After you retrieve or import a CA certificate, you must request a personal certificate from this CA. 
If your client was installed with a CA certificate, the Online Certificate Request or File-based 
Certificate Request dialog box opens automatically the first time your computer restarts after client 
installation.
When the CA supports SCEP, submit the request online. For CAs that don't support SCEP, create a 
certificate request to submit to the CA manually.