Communication b/w Intranet Enforcer (SSG) and IC requrie CA-singed Certificate?

[pentium-v_]

Hello freinds

I am testing UAC solution in lab. I have IC and SSG. I read for communication b/w SSG and IC require both have CA-signed certificate. My question is that how can i get CA-signed certificate to install on IC and SSG for testing purpose? I dont have CA-singed certificate. Is there any method available like preshare key etc for communication b/w SSG and IC?

Thanks a lot in advance

[Screenie_]

Easiest thing to do is download a simple (freeware) CA. copy root certs to IC and SSG and create two certs requests. Install the device certs and go with it.

( check this http://www.netcraftsmen.net/welcher/papers/certauth01.html )

Message Edited by Screenie on 06-21-2009 10:06 PM

Message Edited by Screenie on 06-21-2009 10:10 PM

[pentium-v_]

Thanks screenie for your answer. Can you please guide me how to generate this software we can generate CA-singed certificate which is then i install on both SSG and IC.

Thanks in advance

[Screenie_]

I googled: this looks like a ready to use freeware http://www.softpedia.com/get/Security/Encrypting/LightCA.shtml or maybe you have a AD server in your lab? You can install a MS certserver on a AD server.

[muttbarker_]

If you don't want to build out a cert server there is an excellent CA Cert offered up by CACert.org - it is open source based and quite easy to use. You will need to import their root certificate into your browser but they are trustworthy and you can't be the cost

[ssl_boy_]

Hi,

Easier still, just use openssl; there is a complete example "how-to" in the admin guide (just do a search). Follow the instructions CAREFULLY and you'll be their, takes about 20 mins.

enjoy.

[ManojReddy_]

You need to install device cert(server certificate) on IC And CA cert on FW.

as some one mentioned above, you donot need to install device cert on FW. FW needs only CA certificate of CA which issued certificate to IC.

reply, if you are still facing the issue.