Configuring PKI Management

This section describes how to configure PKI management.

Exporting and Importing PKI Trust Zone Information

To facilitate configuration, you can export a PKI trust zone's certificate (CA and local certificate) and the private key for the local certificate in PKSC12 format, and import them on another security device.

To export PKI trust zone information, take the following steps:

  1. Select Objects > PKI from the menu bar.
  2. In the PKI Management dialog, click the Management tab, and select a PKI trust domain from the Trust zone drop-down list.
  3. In the Content section, click a certificate. If PKCS#12 is selected, you also need to enter a password and confirm the password that is used to decrypt PKCS12 data.
  4. In the Action section, click Export.
  5. Click OK to complete.

To import PKI trust zone information, take the following steps:

  1. Select Objects > PKI from the menu bar.
  2. In the PKI Management dialog, click the Management tab, and select a PKI trust domain from the Trust zone drop-down list.
  3. In the Content section, click a certificate. If PKCS#12 is selected, you also need to enter a password and confirm the password that is used to decrypt PKCS12 data.
  4. In the Action section, click Import, and click Browse to select a certificate.
  5. Click OK to complete.

Exporting and Importing a Local Certificate

To facilitate configuration, you can export a PKI trust zone's local certificate, and import it on another security device.

To export a PKI trust zone's local certificate, take the following steps:

  1. Select Objects > PKI from the menu bar.
  2. In the PKI Management dialog, click the Management tab, and select a PKI trust domain from the Trust zone drop-down list.
  3. In the Content section, click Local certificate.
  4. In the Action section, click Export.
  5. Click OK to complete.

To import a PKI trust zone's local certificate, take the following steps:

  1. Select Objects > PKI from the menu bar.
  2. In the PKI Management dialog, click the Management tab, and select a PKI trust domain from the Trust zone drop-down list.
  3. In the Content section, click Local certificate.
  4. In the Action section, click Import, and click Browse to select a certificate.
  5. Click OK to complete.