Export SSL VPN certificates and Certificate Authorities

This article outlines exporting SSL VPN certificates and Certificate Authorities (CAs). You may need to export and add your CA to other systems so they can authenticate your signed certificates. For example, you might:

• Configure your secondary Smoothwall Appliance to authenticate certificates created by your main Smoothwall Appliance’s CA.
• Migrate the CA to another server to avoid redeploying a new certificate to all clients.

Export a CA

1. Go to Network > VPN > Certificate authorities.
2. Go to the Installed Certificate Authority certificates table.
   

   Tip

   Select a CA to view its details in another browser tab.

3. Select the checkbox for the CA in the Mark column.
   

   Note

   Only the top CA selected will be downloaded.

4. Choose an Export format:
   1. Keep CA certificate in PEM selected to export the certificate in an ASCII (textual) format commonly used by Microsoft operating systems.
   2. Select CA certificate in BIN to export the certificate in a binary format.
5. Select Export.
6. The .pem or .bin file will download to your computer.

Export a certificate

1. Go to Network > VPN > Certificates.
2. Go to the Installed signed certificates table.
   

   Tip

   Select a certificate to view its details in another browser tab.

3. Select the checkbox for the certificate in the Mark column.
   

   Note

   Only the top certificate selected will be downloaded.

4. Choose an export format:
   • PKCS#12:
     1. Enter a Password into the Password and Again fields.
     2. Select Export certificate and key as PKCS#12.
     3. The .p12 file will download to your computer.
   • Other format:
     1. Select the format from the Export format dropdown:
        • Certificate in PEM: Export the certificate in ASCII (textual) format, commonly used by Microsoft operating systems. Use this for Smoothwall to Smoothwall VPN connections.
        • Certificate in DER: Export the certificate in binary format for non-Smoothwall VPN gateways.
        • Private key in DER: Exports only the private key in binary format for non-Smoothwall VPN gateways.
     2. Select Export.
     3. The .pem or .der file will download to your computer.