General Settings of Certificate Management

Prerequisites

You have the Query Certificate Settings and Manage Certificate Settings permissions.

Context

• Certificate alarm configurations: If the remaining validity period of a certificate reaches the alarm generation threshold, certificate management reports an alarm. If the time unit is day, certificate management checks certificate validity every day, and the default alarm generation threshold is 90 days. If the time unit is hour, certificate management checks certificate validity every 24 hours, and the default alarm generation threshold is 2160 hours. You can change the certificate check interval and the alarm generation threshold as required to prevent frequent alarm reporting. To prevent services from becoming unavailable due to certificate expiration, you need to update the certificate periodically (for example, every three months).
• CRL check: The CRL check function specifies whether to enable the CRL check mechanism. After this function is enabled, the system checks whether any CRL is empty. It is recommended that this function be enabled to ensure security.

Procedure

1. Choose System > About > Certificate Management from the main menu.
2. In the navigation pane, choose Settings > General Settings.
3. On the General Settings page, configure the function information based on site requirements.

   Function	Troubleshooting Procedure
   Certificate alarm configurations	Click Modify. Select Time unit, and set Check interval and In advance alarm before certificate expires as required. Click Save.
   CRL check	Enable or disable the CRL check function as required.