You can configure Certificate Authority (CA) certificate bundles that are used to validate client certificates by using the appliance CLI.
The appliance supports single PEM-encoded certificates. A set of intermediate and root CA certificates are used to validate the certificates from the CAC card and they are presented to the appliance. You can download a certificate bundle from a remote URL, import all the certificates to the appliance, and add the certificates to the specified bundle list.
The following important attributes are provided in the certificate:
Subject
Public Key
Serial Number
Valid to (expiration date)
Key Usage
Subject Alternative Name
For details about how to define the certificate attributes, see Defining default certificate attributes.
Admin access to the appliance.
(Optional) LDAP servers have been configured to authorize users. For details about how to configure an LDAP server, see LDAP server configuration.