Skip to main content

Certificate management

You canThe checkdashboard yourincludes certificates list from thea Certificates section onto import, view, and delete certificates. Clicking a certificate row opens the dashboard.certificate Toeditor. see

Certificates list

 Certificates are displayed in a sortable, paginated table. The list includes both client certificates and Certificate Authorities (CA).

Filters

 At the detailstop of the page you can enable filters using the chip list. Some filters are mutually exclusive.

  • All: show all certificates.
  • Client: show client certificates only.
  • Certificate Authority (CA): show CA certificates only.
  • Search: shows a text field (label Name or modifyfilename) to search by certificate name or imported filename.
  • Without user: show client certificates not associated with any user.

Table columns

  • Name
  • Type
  • Expiration
  • User (shown for client certificates)
  • Imported filename
  • Import date

Actions

  • Open certificate: click a certificate,row clickto onopen the selectedcertificate itemeditor.
  • Delete incertificate: available only when the table.

    certificate is not associated with users/policies and is not used by devices. The action can also be disabled when the license is expired.
  • Multi-row selection: you can enable multi-row selection to delete multiple certificates at once. Only deletable certificates can be selected.
  • Refresh: reload the certificates list.

Import certificates

 To import new certificates, click on the Import certificate button.and Thereselect one or more files. Supported formats are twoshown typesin the tooltip of certificatesthe thatimport can be imported:

button.

Clients

Supported format: base-64 encoded PKCS#12.PKCS#12 (.p12 / .pfx).

These areClient certificates that identify a user or a device on the enterprise network. Client certificates can be associated with a specific user.

 Each client certificate can be optionally assigned to a specific user: this allows the deployment ofdeploying the same WiFiWi‑Fi EAP configuration on many devices. You can do that in the policy's network configuration section, using the EAP credentials from users option.To assign a user, open the certificate from the table (click on the item in the table), then click on the icon in the User field.

Alternatively, you can assign a certificate to a user from the User page.

 

Certificate Authorities (CA)

Supported formats: base-64 encoded X.509 (.crt / .pem / .cer / .der).

These areCA certificate thatcertificates identify a Certificate Authority.Authority Itand indicatesindicate to the device that any certificates issued by the CA should be trusted. The dashboard validates that an imported X.509 certificate is a CA.

Certificate editor

When you open a certificate, the editor shows its main fields and a read-only Certificate information panel.

Main fields

  • Name (required)
  • Id (read-only)
  • Type (read-only)
  • Expiration (read-only)
  • Import date (read-only)
  • Imported filename (read-only)

User association (client certificates)

 For Client certificates, the editor shows a User field. If a user is assigned, a menu allows you to Open user, Change user, or Disassociate user. If no user is assigned, you can assign one using the user action button.

Delete certificate

 The delete action is disabled when the certificate is currently associated with a user or used in policies. It can also be disabled when the license is expired.

Back to top