Managing certificates

Help | Content Gateway | Version 7.8.x

Related topics:

Adding new certificate authorities

Backing up certificates

Restoring certificates

Content Gateway initially populates the Certificate Authority Tree (trusted certificate store) with the list qualified by Mozilla for Firefox (see this mozilla.org page). The CA tree is listed on the Configure > SSL > Certificates > Certificate Authorities tab. Content Gateway trusts origin servers that offer these certificates.

In the list a small "i" appears before the names of certificates that can be validated via CRL (certificate revocation lists) or OCSP (online certification status protocol). See Keeping revocation information up to date for information about checking the revocation status of a certificate. Content Gateway checks the revocation status of certificates used for both inbound and outbound traffic.

Click on the name of a certificate authority to:

View a certificate

Delete a certificate

Change the allow/deny status of a certificate

View a certificate

Go to Configure > SSL > Certificates > Certificate Authorities.

Select the name of the authority whose status you want view.

In the pop-up window, select Click to view certificate.

Follow the directions in the Opening window to open or save the file.

Delete a certificate

Go to Configure > SSL > Certificates > Certificate Authorities.

Select the name of the certificate authority you want to delete.

In the pop-up window, select Click to delete certificate.

Confirm or deny that you want to delete the certificate.

If you confirm that you want to delete the certificate, check that the certificate is no longer listed on Configure > SSL > Certificates > Certificate Authorities.

Change the allow/deny status of a certificate

Go to Configure > SSL > Certificates > Certificate Authorities.

Select the name of the authority whose status you want to change.

In the pop-up window, select Click to change status to. Depending on the status of the certificate, your choice is allow or deny. If you change the status to deny, a red X appears next to the name of the certificate authority in the certificate authority tree. If you change the status to allow, a green circle appears next to the name of the certificate authority.