does IC connectivity with IF requires a CA certificate

[eng_mahmood48_]

Hi All

1- does the IC connectivity with IF requires a Certificate purchased from a CA, or using the self signed certificate is enough?

2- I used the Openssl and was not able to create the certificate, is there a guide?

[Stanislas P_]

Hi,

1 - what is IF?

2 - UAC Administration Guide page 70. http://www.juniper.net/techpubs/software/uac/4.1xguides/j-ic-uac-4.1-adminguide.pdf

Regards,

Stan

[Raveen_]

Hi,

I reckon, you did mean Infranet Enforcer ( IE).

If it is IE, *YES*, you need CA certificate to be installed.

Thanks,

Raveen

[eng_mahmood48_]

Hi raven & Stan

sorry i mean the IE (infranet inforcer).

is there any way to install a certificate without purchasing a certificate from a CA?

[Stanislas P_]

Hi,

YES, you can't use the self signed certificate for IC / IE Communication. you must create a new CA (or use your organisation CA if exist) to sign IC Certificate and import CA certificate as Tusted certificate in the firewall configuration.

follow Administration guide to create a new CA and generate IC Certificate.

Regards,

Stan