Manage certificates

Certificates verify the identity of a user or device and enables secure communication of encrypted data. You can upload and manage external certificates in the UPLOADED CERTIFICATES tab of the Certificates page. You can also upload and manage certificate templates in the TEMPLATES AND CA tab of the Certificates page.

To learn how to connect to and manage a certificate authority (CA), see Manage certificate authorities.

Upload a certificate

Complete the following steps to upload a certificate:

1. Go to Connection and security > Certificates.
2. On the Certificates page, click UPLOAD CERTIFICATE.
3. On the Upload certificate page, enter the following information:
   • Certificate name (alias) — Assign a unique name for each certificate.
   • Purpose — Select a purpose for the certificate:
     • Wi-Fi — Authorizes connecting with an Access Point (AP) for Wi-Fi.
     • VPN — Authorizes encrypted VPN communication when registering Knox Manage on devices.
     • CA Cert — Authorizes communication with a registered Certificate Authority (CA) based on the user’s public key.
     • Code Signing Certificate — Verifies code authenticity, ensures integrity, and protects against malicious code.
     • Syslog — Logs system events, centralizes monitoring, and detects security threats.
     • Identity provider — Authenticates users, authorizes access, and enables Single Sign-On (SSO).
   • Type — Select a type for the certificate:
     • User — Certificate issued for general purposes, such as to authenticate devices or applications.
     • Server — Server certificate for general purposes.
     • Root — Highest level of certificate that identifies the Root CA.
   • File type — Click the upload icon and select a certificate file in P12, PFX, CER, DER, CRT or PEM format.
     • P12, PFX — Used for private keys and certificates.
     • CER, DER, CRT, PEM — Used for public keys and certificates.
   • Description — Enter a description for the certificate (optional).
4. Click UPLOAD. The certificate will be registered with Knox Manage.

Edit a certificate

You can edit certificates as follows:

1. Open the Certificates page.

2. Select the certificate you want to modify, then click ACTIONS > Edit certificate.

3. On the Edit certificate page, edit certificate information as needed.

   The Purpose and Type values of external certificates can’t be modified.

4. Click Save.

Delete a certificate

To delete a certificate, complete the following steps:

1. Open the Certificates page.
2. Select the certificate you want to delete, then click ACTIONS > Delete certificate.
3. In the Delete certificate window, click DELETE.

Upload a template

The Certificate Authority (CA) server manages certificates through certificate templates. You can add as many templates as you need, and modify them to standardize and simplify the process of issuing certificates.

To upload a template:

1. On the Certificates page, go to the TEMPLATES AND CA tab.

2. Click ADD TEMPLATE. The Add template page opens.

3. Enter the following information:

   • Template name — Assign a unique name for the certificate template.

   • Description — Enter a description for the certificate template.

   • Purpose — Select a purpose for the certificate.

     Only Wi-Fi is currently supported as a purpose.

   • CA name — Assign a unique name for the certificate authority.

   • Subject name — Enter a subject name in CN = {Subject name value} format. Alternatively, click Lookup to open the Select Lookup Item dialog and select an item.

   • SAN type — Select a SAN type, and then enter the SAN value. Click to add.

4. Click ADD.

Edit a template

To edit a template:

1. On the Certificates page, click the TEMPLATES AND CA tab.

2. Select the checkbox of the template you want to edit, then click ACTIONS > Edit template.

3. Edit details as required.

4. Click SAVE.

Delete a template

To delete a template:

1. On the Certificates page, go to the TEMPLATES AND CA tab.

2. Select one or more of the templates you want to delete, then click ACTIONS > Delete template(s). The Delete template dialog displays.

3. Click DELETE to confirm your intent to delete the template.