HP Secure Key Manager - Manual (Page 167)

Description Component
Displays one of three values:Certificate Active - The CA can be used to issue certs
and sign certificate requests.Certificate Expires: X Days - The CA cert expires in X
days. This status appears 30 days before the certificate expires.Certificate Expired -
The CA has expired. For an external CA, such as VeriSign, contact the CA to obtain
a new certificate. For a local CA, regenerate the CA.
Certificate Status
Click Edit to change the name of a CA certificate. Edit
Click Delete to remove a CA certificate. Delete
Click Properties to view additional information about a CA certificate. Properties
Click Download to download a CA certificate to your web browser. Download
Install CA Certificate
Use the Install CA Certificate section of the Known CAs tab to add CA certificates to the CA Certificate
List.
The Install CA Certificate section is shown here.
Figure 92 Viewing the Install CA Certificate section
The following table describes the components of the Install CA Certificate section.
Table 72 Install CA Certificate section components
Description Component
Enter the certificate name. Certificate Name
Paste the contents of the certificate. Certificate
Click Install to install the CA. Install
Support for Certificate Revocation Lists
Certificate Authorities regularly publish a list of certificates that have been revoked by that CA. Such
a list is called a certificate revocation list (CRL). The list of revoked certificates is distributed in X.509
Secure Key Manager 167