1- does the IC connectivity with IF requires a Certificate purchased from a CA, or using the self signed certificate is enough?
2- I used the Openssl and was not able to create the certificate, is there a guide?
1 - what is IF?
2 - UAC Administration Guide page 70. http://www.juniper.net/techpubs/software/uac/4.1xguides/j-ic-uac-4.1-adminguide.pdf
I reckon, you did mean Infranet Enforcer ( IE).
If it is IE, *YES*, you need CA certificate to be installed.
Hi raven & Stan
sorry i mean the IE (infranet inforcer).
is there any way to install a certificate without purchasing a certificate from a CA?
YES, you can't use the self signed certificate for IC / IE Communication. you must create a new CA (or use your organisation CA if exist) to sign IC Certificate and import CA certificate as Tusted certificate in the firewall configuration.
follow Administration guide to create a new CA and generate IC Certificate.