Manage certificates

Upload new and manage already-issued external certificates on the UPLOADED CERTIFICATES tab of the Certificates page for enhanced security (Connection and security > Certificates). You can upload certificates — such as for Wi-Fi, VPN, and APNs — as well as view details, edit, and delete certificates.

Add and manage templates on the TEMPLATES AND CA tab of the Certificates page.

To see details of an existing certificate, click the corresponding link under the CERTIFICATE NAME or TEMPLATE NAME column.

To learn how to connect to and manage a certificate authority (CA), see Manage certificate authorities.

Upload a certificate

Complete the following steps to upload a certificate:

1. Open the Certificates page and click UPLOAD CERTIFICATE.
2. On the Upload certificate page, enter the following information:
   1. Certificate name (alias) — Assign a unique name for each certificate.
   2. Purpose — Select a purpose for the certificate.
      1. Wi-Fi — Authorizes connecting with an Access Point (AP) for Wi-Fi.
      2. VPN — Authorizes encrypted VPN communication when registering Knox Manage on devices.
      3. CA Cert — Authorizes communication with a registered Certificate Authority (CA) based on the user’s public key.
      4. Code Signing Certificate — Verifies code authenticity, ensures integrity, and protects against malicious code.
      5. Syslog — Logs system events, centralizes monitoring, and detects security threats.
      6. Identity provider — Authenticates users, authorizes access, and enables Single Sign-On (SSO).
   3. Type — Select a type for the certificate.
      1. User — Certificate issued for general purposes, such as to authenticate devices or applications.
      2. Server — Server certificate for general purposes.
      3. Root — Highest level of certificate that identifies the Root CA.
   4. File type — Click the upload icon and select a certificate file in P12, PFX, CER, DER, CRT or PEM format.
      1. P12, PFX — Used for private keys and certificates.
      2. CER, DER, CRT, PEM — Used for public keys and certificates.
   5. Description — Enter a description for the certificate.
   6. Click UPLOAD. The certificate will be registered with Knox Manage.

Edit a certificate

You can edit certificates as follows:

1. Open the Certificates page.

2. Select the certificate you want to modify, then click ACTIONS > Edit certificate.

3. On the Edit certificate page, edit certificate information as needed.

   The Purpose and Type values of external certificates can’t be modified.

4. Click Save.

Delete a certificate

To delete a certificate, complete the following steps:

1. Open the Certificates page.
2. Select the certificate you want to delete, then click ACTIONS > Delete certificate.
3. In the Delete certificate window, click DELETE.

Upload a template

The Certificate Authority (CA) server manages certificates through certificate templates. You can add as many templates as you need, and modify them to standardize and simplify the process of issuing certificates.

To upload a template:

1. On the Certificates page, go to the TEMPLATES AND CA tab.

2. Click ADD TEMPLATE. The Add template page opens.

3. Enter the following information:

   • Template name — Assign a unique name for the certificate template.

   • Description — Enter a description for the certificate template.

   • Purpose — Select a purpose for the certificate.

     Only Wi-Fi is currently supported.

   • CA name — Assign a unique name for the certificate authority.

   • Subject name — Enter a subject name in CN = {Subject name value} format. Alternatively, click Lookup to open the Select Lookup Item dialog and select an item.

   • SAN type — Select a SAN type, and then enter the SAN value. Click to add.

4. Click ADD.

Edit a template

To edit a template:

1. On the Certificates page, go to the TEMPLATES AND CA tab.

2. Select the checkbox of the template you want to edit, then click ACTIONS > Edit template.

3. Edit the details as required.

4. Click SAVE.

Delete a template

To delete a template:

1. On the Certificates page, go to the TEMPLATES AND CA tab.

2. Select one or more checkbox of the templates you want to delete, then click ACTIONS > Delete template(s). The Delete template dialog displays.

3. Click DELETE to confirm your intent to delete the template.