Motorola Solutions AP-6511 Access Point System Reference Guide
7-38
7.4.2 Setting the Certificate Revocation List (CRL) Configuration

Profile Security Configuration
A certificate revocation list (CRL) is a list of certificates that have been revoked or are no longer valid. A
certificate can be revoked if the certificate authority (CA) had improperly issued a certificate, or if a private-
key is compromised. The most common reason for revocation is the user no longer being in sole possession
of the private key.
To define a CRL configuration that can be applied to a profile:
1. Select the Configuration tab from the Web UI.
2. Select Profiles from the Configuration tab.
3. Either select Add if creating a new profile or Edit if modifying the configuration on an existing profile.
4. Select Security.
5. Select Certificate Revocation.
Figure 7-21 Security Certificate Revocation screen
6. Select the + Add Row button to add a column within the Certificate Revocation List (CRL) Update
Interval table to quarantine certificates from use in the network.
Additionally, a certificate can be placed on hold for a user defined period. If, for instance, a private key
was found and nobody had access to it, its status could be reinstated.
a. Provide the name of the trustpoint in question within the Trustpoint Name field. The name cannot
exceed 32 characters.
b. Enter the resource ensuring the trustpoint’s legitimacy within the URL field.
c. Use the spinner control to specify an interval (in hours) after which a device copies a CRL file from
an external server and associates it with a trustpoint.
To Next Page
Loading...
Need help?
General
