Manage certificates

Manage already-issued external certificates on the Certificates page for enhanced security (Connection and security > Certificates). You can upload certificates — such as for Wi-Fi, VPN, and APNs — as well as view details, edit, and delete certificates.

To see details of an existing certificate, such as the certificate purpose and expiration date, click the corresponding link under CERTIFICATE NAME.

Upload a certificate

Complete the following steps to upload a certificate:

1. Open the Certificates page and click UPLOAD CERTIFICATE.
2. On the Upload certificate page, enter the following information:
   1. Certificate name (alias) — Assign a unique name for each certificate.
   2. Purpose — Select a purpose for the certificate.
      1. Wi-Fi — Authorizes connecting with an Access Point (AP) for Wi-Fi.
      2. VPN — Authorizes encrypted VPN communication when registering Knox Manage on devices.
      3. CA Cert — Authorizes communication with a registered Certificate Authority (CA) based on the user’s public key.
      4. Code Signing Certificate — Verifies code authenticity, ensures integrity, and protects against malicious code.
      5. Syslog — Logs system events, centralizes monitoring, and detects security threats.
      6. Identity provider — Authenticates users, authorizes access, and enables Single Sign-On (SSO).
   3. Type — Select a type for the certificate.
      1. User — Certificate issued for general purposes, such as to authenticate devices or applications.
      2. Server — Server certificate for general purposes.
      3. Root — Highest level of certificate that identifies the Root CA.
   4. File type — Click the upload icon and select a certificate file in P12, PFX, CER, DER, CRT or PEM format.
      1. P12, PFX — Used for private keys and certificates.
      2. CER, DER, CRT, PEM — Used for public keys and certificates.
   5. Description — Enter a description for the certificate.
   6. Click UPLOAD. The certificate will be registered with Knox Manage.

Edit a certificate

You can edit certificates s follows:

1. Open the Certificates page.

2. Select the certificate you want to modify, then click ACTIONS > Edit certificate.

3. On the Edit certificate page, edit certificate information as needed.

   The Purpose and Type values of external certificates can’t be modified.

4. Click Save.

Delete a certificate

To delete a certificate, complete the following steps:

1. Open the Certificates page.
2. Select the certificate you want to delete, then click ACTIONS > Delete certificate.
3. In the Delete certificate window, click DELETE.