Netgear 05200007 사용자 설명서
Reference Manual for the NETGEAR ProSafe VPN Client
Using the Certificate Manager
6-9
202-10015-01
Note: If you requested your CA certificate manually from CA that supports SCEP, and want to
request a personal certificate online, configure the CA certificate before requesting the personal
certificate.
request a personal certificate online, configure the CA certificate before requesting the personal
certificate.
1.
In the Certificate Manager, click the My Certificates tab.
2.
Click Request Certificate. The Online Certificate Request or File-based Certificate
Request dialog box opens.
Request dialog box opens.
3.
For online certificate requests only: In the Enrollment method group, make sure that Online is
selected.
selected.
4.
In the Subject Name group, complete the personal information boxes, as required by the CA.
Note: To use LDAP format when completing these boxes, select the Enter Subject Name in
LDAP format check box, and then go to Edit a distinguished name.
LDAP format check box, and then go to Edit a distinguished name.
5.
If this CA requires it, complete at least one box in the Subject Alternate Name group,
according to the CA's instructions. These boxes may be completed automatically.
according to the CA's instructions. These boxes may be completed automatically.
6.
For online certificate requests only: In the Online Request Information group, take these
steps:
steps:
a.
In the Challenge Phrase box, type an alphanumeric character string for the CA to confirm
your identity with if you ask to revoke your certificate. The CA makes sure that you are
the person the certificate says you are before rescinding your certificate. Record this
phrase.
your identity with if you ask to revoke your certificate. The CA makes sure that you are
the person the certificate says you are before rescinding your certificate. Record this
phrase.
b.
In the Confirm Challenge box, retype the challenge phrase.
c.
In the Issuing CA list, click the CA you are requesting the certificate from.
Caution: Make this selection carefully; you can't reverse your decision later.
In the Key Generation Options group, specify whether the private key associated with the
personal certificate you're requesting can be exported to, for example, transfer it to another
computer or make a backup copy. By default, the private key cannot be exported; the
Generate exportable key check box is clear. To make the key exportable, select the Generate
exportable key check box.
personal certificate you're requesting can be exported to, for example, transfer it to another
computer or make a backup copy. By default, the private key cannot be exported; the
Generate exportable key check box is clear. To make the key exportable, select the Generate
exportable key check box.
7.
To select the CSP or assign the default CSP, click Advanced.
8.
Click OK.
•
For online certificate requests only: This submits your request. The Key Generation
message box opens while the client generates a public/private key pair, and then closes.
The Online Certificate Request message box opens when the client submits your
request.
message box opens while the client generates a public/private key pair, and then closes.
The Online Certificate Request message box opens when the client submits your
request.