For authentication,you must upload trusted CA and web certificates.
Ensure that you remember these guidelines before generating and uploading any certificate to Intelligent Sandbox:
First, add root CA certificate to trusted CA bundle of Intelligent Sandbox. The Intermediate CA certificates are optional.
CA flag must be set for CA certificates.
Uploading chain certificates is not supported. Upload certificates one by one.
Intelligent Sandbox validates expiry dates of certificates.
Intelligent Sandbox checks for certificate revocation using OCSP or CRL. Certificate must have either OCSP or CRL URL. Ensure that the URLs are HTTP.
Intelligent Sandbox checks for certificate chain validation. For the validation, Intelligent Sandbox uses Authority information Access (AIA) issuer URL for creating full chain. Certificate chain validation fails if this field is not present.
Intelligent Sandbox checks for host name validation. Then, it compares presented identifier with SAN or CN field of certificate. In case SAN field is present then CN is not checked as part of host name validation. Wildcard certificates are accepted and are validated as part of host name check.
Minimum key size accepted by Intelligent Sandbox is 2048 for end certificate.
Minimum signature algorithm should be SHA256 with RSA encryption for end certificate.
When you upload a certificate for the web server, Intelligent Sandbox checks for the certificate and key in the same PEM file (certificate and private key concatenation), then validates the metadata. Post validation, you might see security warnings as a result of the validation which you can accept or fix.
Trusted CA Certificates
Upload all trusted root and intermediate CA (optional) certificates in the Trusted CA Certificates section. Certificate chain validation passes only if the root CA is in the trusted CA certificates.
Caution
Ensure that you first upload the root CA certificate first, before you upload any intermediate CA certificates.
Web Certificates
Upload all web server certificates in the Web Certificates section. Certificate is validated for basic checks in non-CC mode and strict checks in CC mode.
Caution
Ensure that you have uploaded all root CA certificates before you upload the web server certificates.