Certificates for mobile VPN

Comments

• james.carson Moderator, WatchGuard Representative

  December 2023

  The WG CA manager is just using OpenSSL in the background -- it just presents a nice(r) UI to do it VIA.

  If you're familiar with OpenSSL and already have it set up, it's fine to use that, otherwise use the CA manager, as it'll ensure that all of the appropriate info is in the cert.

  See:

  (IKEv2)
  https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/certificates/authentication_mvpn_ikev2.html

  (IPSec)
  https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/certificates/authentication_muvpn_web.html

  Using the CA manager will ensure that any key use flags are properly set. If you use OpenSSL, you must tell OpenSSL to do that yourself.

  -James Carson
  WatchGuard Customer Support

  0
• DVM

  December 2023 edited December 2023

  Thanks for the links. I found more details on how to use the CA Manager,

  https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/certificates/cert_mgr_use_webbased_wsm.html

  0