Certificates

Certificates make sure the communication between the Docuflair server and the multifunction devices is encrypted and secure. A certificate confirms a server’s identity — much as an identity card does for a person. Without a valid certificate, data could be transferred unencrypted or intercepted by third parties.

You reach the certificate management through the menu navigation under Devices > Certificates.

Permission required

To access this function you need the following permission:

• Full control (AdminUI_FullControl)

You grant permissions through groups — see permissions – overview.

In the certificate management you manage digital certificates for secure communication between Docuflair and the multifunction devices. It consists of three areas:

• Certificates
• Certificate signing requests (CSRs)
• SCEP

Certificates

An overview of every certificate installed in the system. The list shows information such as the certificate name, the issuer, the period of validity and the fingerprint.

Certificate signing requests (CSRs)

This is where you create and manage certificate signing requests. You need a CSR in order to request a signed certificate from a certification authority (CA).

Creating a CSR

Function	Description
Common name	The common name of the certificate (the server name, for example).
Organisation	The name of the organisation.
Organisational unit	The department or unit.
Locality	The town or place.
State	The state or region.
Country	The country code (AT or DE, for example).
Key length	The length of the cryptographic key.

SCEP

The Simple Certificate Enrollment Protocol (SCEP) allows certificates to be enrolled with a certification authority automatically.

Function	Description
OTP mode	The mode for one-time passwords during the enrolment.
One-time password	The password for the SCEP authentication.
User name	The SCEP user name.
Password	The SCEP password.
Server URL	The URL of the SCEP server.
SSL authentication	Switches the SSL authentication on.
Key length	The length of the key to be created.
Digest algorithm	The hash algorithm for the certificate signing request.
CA certificate fingerprint	The fingerprint of the CA certificate, for verification.