English

Use the Certificate Management page to see details about your certificates, modify them, delete them, or request new ones

1.	Click the Security tab.
2.	Click the Certificate Management link.

	NOTE:	The product supports the following import formats for certificates:

●	.DER (binary)
●	.CER (binary or Base64)
●	PEM (Base64)
●	PFX (identity certificate)

To install a certificate, use the following steps:

1.	Click the Browse button next to the Choose File field.
2.	Locate the certificate for import, and click the Open button. NOTE: Identity type certificates, as well as Certificate Authority type certificates, are valid types for importation and use with this product.
3.	Click the Import button. NOTE: For PFX certificates that require a password, type the password for the certificate in the Certificate Password field.

Use the Certificates area of the Certificate Management page to manage imported certificates.

To remove a certificate, use the following steps:

1.	Select a certificate.
2.	Click the Remove... button.
3.	Confirm the removal operation in the warning dialog box that displays.

To view the details of a certificate, like the public key and serial number for the certificate, use the following steps:

1.	Select a certificate.
2.	Click the View Details button, which displays the certificate information.

To export a certificate, use the following steps:

1.	Select a certificate.
2.	Click the Export... button. NOTE: When exporting an identity certificate, only the public key is exported.

To use a certificate for e-mail signing, follow these steps:

▲	Select the certificate and then click the Use for E-mail Signing button.

Use the Certificate Validation tab to validate OCSP Kerberos server certificates.

Follow these steps to configure certificate validation:

1.	Select the Perform OCSP Validation on the certificate trust chain check box.
2.	Enter a URL for a OCSP server and then click the Add button. NOTE: Multiple OCSP servers can be added for certificate validation. The URLs for the OCSP server(s) may be fully qualified domain names or IP addresses:
3.	Select the Treat Unknown certificate status as valid check box, if necessary.
4.	Click the Apply button to save your changes.

	NOTE:	Certificates may need to be installed in the certificates tab for the OCSP servers.

This section provides information about the following topics: