Create, edit or delete a VPN Certificate Authority (CA) – Help Centre

This article applies to our On-Premise Appliance Filter and Firewall product only, not to Cloud.

This article explains how to:

You can also import a CA if needed.

Create a new local CA

Note

You can only create a local CA if one isn’t already set up.

Go to Network > VPN > Certificate authorities.
Go to the Create local Certificate Authority section.
Enter a Common name to identify the CA. For example, the Smoothwall hostname.
(Optional) Enter the Email address of the CA owner you can use to identify the CA.
Enter the Organisation name.This field is required for VPN CAs.
(Optional) Add additional identifying information:
- Department
- Locality or town
- State or province
- Country (must be a valid two-letter ISO-3166 country code, or the CA won’t be added)
Use the Life time dropdown to select from:
- Preset duration: 1 day, 1 week, 2 weeks, 1 month, 3 months, 6 months, 1 year, 2 years, 4 years or 8 years.
- User defined: Enter a custom number of days (between 1 and 365000).
Select Create Certificate Authority. The CA name will show in the Installed Certificate Authority certificates table as “Common name’s Organisation certificate (LOCAL CA)”. For example, if the Common name is Bob, and the Organisation is Example School, the CA will show as Bob’s Example School certificate (LOCAL CA).

Important

You can’t edit a VPN CA. To make changes, you must delete it and create a new one.

Warning

Deleting the local CA will invalidate all certificates created from it.

Go to Network > VPN > Certificate authorities.
In the Installed Certificate Authority certificates section, select the checkbox in the Mark column for the CA to delete.

Note

If you select the Local CA, none of the other CAs you select will be deleted.
Select Delete.