Security Certificate

The Security Certificate object holds details of a security certificate used by a CORBA client or by the Web Server to connect to the EMS Server. It is a child of the Security Certificates object.

Security Certificate objects are normally created automatically in one of the following ways.

In both cases, the EMS sets Certificate authorized in the newly-created EMS Certificate object to False. This means that the client connecting with an unknown certificate will be unable to connect on the first attempt. If you then use the EMS System Explorer (from an already authorized client, or from a client connecting in insecure mode if this is supported) to authorize the certificate by setting Certificate authorized to True, clients using this certificate will be able to connect on subsequent attempts.

You can also create a new Security Certificate object if you have the corresponding data in Base-64 Encoded DER format (X.509 format), which is the format that third-party applications generally use. To do this, create the new object, copy the certificate contents into the Certificate in X.509 encoded text format text field, and set Certificate authorized to True. The EMS fills in the other fields in the object based on the certificate contents.

You can also delete an existing Security Certificate object if it is no longer valid or if you need to revoke the authorization of a client using it.


Parameter

Access

Description
Certificate authorized Change Indicates whether clients using this certificate are permitted to connect to the EMS Server. Values:
  • True
  • False (default)
Certificate filename Read only The name of the certificate file as stored on the EMS Server computer. If this object was created in the EMS or when a client first used the certificate to connect, the EMS creates a filename based on the certificate contents.
Issued by Read only A readable text string specifying the licensing authority that created the certificate.
Issued to Read only A readable text string specifying the organization to which the certificate was issued.
Not valid before Read only The start date of the licence's validity period. A client will not be able to connect using the certificate before this date.
Not valid after Read only The end date of the licence's validity period. A client will not be able to connect using the certificate after this date.
Issued by details Read only The Distinguished Name (DN) of the licensing authority that created the certificate.
Issued to details Read only The Distinguished Name (DN) of the organization to which the certificate was issued.
Fingerprint Read only The fingerprint associated with this certificate. If this object was created when the user connected to the server for the first time, and the user has passed a certificate fingerprint to you for validation, you should verify that the two fingerprints match before authorizing this certificate for use.
Certificate in X.509 encoded text format Create The contents of the certificate file in X.509 encoded text format.