Digital Certificate Overview
03/26/2020 34 People found this article helpful 399,351 Views
Description
Digital Certificate Overview
Resolution
Services: Digital Signature overview
Feature/Application: Digital Certificates Overview
Digital Certificates Overview:
A digital certificate is an electronic means to verify identity by a trusted third party known as a Certificate Authority (CA). The X.509 v3 certificate standard is a specification to be used with cryptographic certificates and allows you to define extensions which you can include with your certificate. SonicWall has implemented this standard in its third party certificate support.
You can use a certificate signed and verified by a third party CA to use with an IKE (Internet Key Exchange) VPN policy. IKE is an important part of IPsec VPN solutions, and it can use digital certificates to authenticate peer devices before setting up SAs.
Without digital certificates, VPN users must authenticate by manually exchanging shared secrets or symmetric keys. Devices or clients using digital signatures do not require configuration changes every time a new device or client is added to the network.
A typical certificate consists of two sections:
- Data section
- Signature section
Data Section:
The data section typically contains information such as,- The version of X.509 supported by the certificate
- A certificate serial number
- Information about the user’s public key
- The Distinguished Name (DN)
- Validation period for the certificate
- Optional information such as the target use of the certificate.
Signature section:
The signature section includes- The cryptographic algorithm used by the issuing CA,
- The CA digital signature.
Dell SonicWall security appliances interoperate with any X.509v3-compliant provider of Certificates. Dell SonicWall security appliances have been tested with the following vendors of Certificate Authority Certificates:
• Entrust
• Microsoft
• OpenCA
• OpenSSL
• VeriSign Related Articles
Categories
Was This Article Helpful?
YESNO