Manage Dimension Certificates

In the Certificate Management section of the System Settings > Status page, you can generate a CSR file, import a web certificate, or manage the trusted CA certificates for Dimension. When you import a signed certificate, the private key must be included in the web server certificate. If you use a third-party Certificate Authority (CA) to generate your web server certificate, you must import the certificate to Dimension before you download .WGD files to manage your Fireboxes. You can also regenerate the default web server certificate when it expires.

Generate a Certificate

To generate a CSR file:

Click Generate.
The Certificate Signing Request dialog box appears.
Complete the necessary settings for the Certificate Signing Request.
You must specify the Common Name, Company Name, and Country to include in the CSR. All other fields are optional.
Click Generate.
The CSR is generated.

Import a Web Server Certificate

When you import a web server certificate, Dimension verifies that the certificate is intended to be used for a web server. If the certificate is not intended to be used for a web server, Dimension will not import the certificate.

To import a web server certificate to Dimension:

Click Import.
The Import Web Server Certificate dialog box appears.
Select an option to import the certificate from a file or paste the certificate content.
Select a file to import or paste the certificate content.
Click OK.

Export the Web Server Certificate Trust Chain

You can export the Dimension web server certificate chain of trust so you can import it to your Firebox. This is useful if you import a new certificate to Dimension and must replace the Dimension certificate on a Firebox managed by dimension. You can export the updated certificate and import it to Fireboxes that are managed by Dimension, if you cannot export and import the WGD file to those Fireboxes. You can also import it to an RMA device.

To export the certificate trust chain:

Click Export.
The Save As dialog box appears.
Specify a location to save the .PEM file.
Click Save.

Regenerate a Web Server Certificate

The Dimension default web server certificate automatically expires six months after it is generated. You can use the Default Certificate option to generate a new default web server certificate for Dimension.

If you have imported a third-party web server certificate to Dimension, you can also use the Default Certificate option to replace the third-party certificate you imported with a new, default, self-signed certificate generated by Dimension. When you restore a web server certificate, Dimension restarts and you must log in again.

Click Regenerate.
Dimension generates a new default web server certificate. If you had imported a third-party web server certificate, it is deleted replaced by the newly generated default self-signed certificate. A confirmation dialog box appears.
Accept the confirmation message.
The Dimension web server restarts and the Dimension Login page appears.

When you log in to Dimension again, the Default Certificate option is no longer available because Dimension no longer uses an expired certificate or a third-party certificate.

Manage Trusted CA Certificates

On the Trusted CA Certificates page, you can see all the trusted CA certificates available for your instance of Dimension. This includes the CA certificates for your email server (for email notifications), your Active Directory server (for authentication), and for device feedback.

You can import the CA certificates that Dimension uses to create a secure channel between Dimension and your email server or Dimension and your Active Directory server. If the certificates your email server or Active Directory server use are signed by a Certificate Authority that is not already trusted by Dimension, you must import the certificates into Dimension.

For more information about how to configure the email server settings for Dimension, see Configure Notification Settings.

For more information about how to configure the Active Directory server settings for Dimension, see Manage Users and Groups.

You can view a current certificate, delete an imported certificate from the list, or import a new certificate.

When you view a certificate, you can see these details:

Issuer — The Certificate Authority that generated the CA certificate
Subject — The organization that can use the CA certificate
Serial Number — The serial number associated with the CA certificate
Valid From — The date and time the CA certificate is generated
Valid To — The date and time range the CA certificate expires

To view or delete the CA certificates on Dimension:

In the Certificate Management section, click Manage Trusted CA Certificates.
The Trusted CA Certificates page appears.
To see the details of a certificate, select the certificate from the Trusted CA Certificates list and click View.
The View Certificate dialog box appears.
To delete a certificate, select the certificate from the Trusted CA Certificates list and click Remove.

To import a new CA certificate: