Seitenhistorie

...

1.1.1) Connect to the Unified Firewall in the headquarter, switch to the menu Certificate Management → Certificates and click on the "Plus" icon to create a new certificate.

Image Modified

1.1.2) Modify the following parameters to create a CA and click Create:

• Certificate Type: Select the option Certificate.
• Template: Select the template Certificate Authority.
• Common Name (CN): Enter a descriptive Common Name (in this example VPN-SSL-CA-Headquarter).
• Private Key Password: Enter a password. This is used for encrypting the Private Key.

Image Modified

1.1.3) Create another certificate by clicking on the "Plus" icon. This is used In step 1.1.4 it is exported and entered in the VPN SSL settings in the headquarter afterwards (see step 1.1.8). For this purpose modify the following parameters and click Create: 

• Certificate Type: Select the option Certificate.
• Template: Select the template Certificate.
• Common Name (CN): Enter a descriptive Common Name (in this example VPN-SSL-Headquarter).
• Private Key Password: Enter a password. This is used for encrypting the Private Key.
• Validity: Set the validity to at least 5 years. This is recommended, since this certificate is used for all VPN SSL connections. 
• Signing CA: In the dropdown menu select the CA created in step 1.1.2.
• CA Password: Enter the Private Key Password entered in step 1.1.2.

...

1.1.4) Create another certificate by clicking on the "Plus" icon. This is used in the VPN SSL connection in the branch office. For this purpose modify the following parameters and click Create:

...