
78 |Onboard ClearPass Guest 3.9 | Deployment Guide
Choose the file to upload in the Certificate field.
To upload a single certificate, choose a certificate file in PEM (base-64 encoded) or binary format (.crt
or PKCS#7). Leave the passphrase fields blank.
To upload a certificate’s private key as a separate file, choose the private key file in PEM (base-64
encoded) format. If the private key has a passphrase, enter it in the Private Key Passphrase and
Confirm Passphrase fields. The private key will be automatically matched to its corresponding
certificate when uploaded.
To upload a combined certificate and private key, choose a file in either PEM (base-64 encoded) or
PKCS#12 format. If the private key has a passphrase, enter it in the Private Key Passphrase and
Confirm Passphrase fields.
Click the Upload Certificate button to save your changes.
If additional certificates are required, you will remain at the same page. Check the message displayed
above the form to determine which certificate or type of file must be uploaded next.
When the trust chain is complete, it will be displayed. This completes the initialization of the certificate
authority.
Renewing the Certificate Authority’s Certificate
When a root certificate is close to expiration, it must be renewed.
Navigate to Onboard > Certificate Authority Settings and click the Renew Root Certificate link. The
Root Certificate Renewal form is displayed.
Select an option in the Renewal Type drop-down list:
Basic Renewal – Uses the same private key for the root certificate, but reissues the root CA certificate
with an updated validity period. Use this option to maintain the validity of all certificates issued by the
CA.
Kommentare zu diesen Handbüchern