Security Certificates

Use the Security Certificates dialog to add, remove and manage certificates used in 802.1X and other protected networks.

Four types of certificates can be managed:

• Root: The Root certificate is used by the 3-Series device to validate the network's authentication server. 3-Series devices have a variety of Root certificates, self-signed by trusted CAs (Certificate Authorities), pre-loaded into the device. Root certificates must be self-signed.

• Intermediate: The Intermediate store holds non self-signed certificates that are used to validate the authentication server. These certificates will be provided by the network administrator if the network does not use self-signed Root certificates.  

• Machine: The machine certificate is an encrypted PFX file that is used by the authentication server to validate the identity of the 3-Series device. The machine certificate will be provided by the network administrator, along with the certificate password.

For 802.1X, only one (1) machine certificate can reside on the device.

• User: The User store holds additional certificates not used in the 802.1X standard.

To add certificates

1. Click the corresponding certificate tab.

2. Click Add Certificate.

3. Locate the file and click Open.

   • If the certificate is a Machine Certificate, enter the password provided by the network administrator.

4. Click OK. This will add the certificate to the list box, displaying the file name and expiration date.
   
   The certificate is now available for selection and can be loaded to the 3-Series device via the 802.1X dialog.

To delete certificates

1. Click the corresponding certificate tab.

2. Select the certificate to be deleted and click Delete Certificate. This will display a confirmation prompt.

3. Click Yes to proceed with deletion, and then click OK.

To view certificate information

• Select the certificate and click View Certificate.