Siemens SINAUT MD740-1 User Manual page 42

Configuration
42 von 105
X.509 Certificate
This method is supported by most newer IPSec
implementations. The SINAUT MD740-1 encrypts the
authentication datagrams that it sends to the remote site -
the "end of the tunnel" - with the remote site's public key (file
name *.cer or *.pem). (You received this *.cer or *.pem file
from the operator of the remote site, e.g. on a disk or by e-
mail).
To make this public key available to the
SINAUT MD740-1, proceed as follows:
Prerequisite:
You have stored the *.cer or *.pem file on the locally
connected computer.
1. Click on Configure.
Consequence: The VPN > Connections > Connection
xyz > X.509 Certificate screen appears. ("xyz" is the
name of the connection concerned.)
2. Click on Browse... and select the file.
3. Click on Import.
After importing, the content of the new certificate is
displayed – see following illustration. You will find an
explanation of the displayed information in section VPN
#
Machine Certificate, page 48.
Pre-Shared Secret Key (PSK)
This method is supported mainly by older IPsec
implementations. The SINAUT MD740-1 encrypts the
datagrams which it sends to the remote site – the "end of
the tunnel" – with an agreed sequence of characters.
To make this agreed key available to the
SINAUT MD740-1, proceed as follows:
1. Click on Configure.
SINAUT MD740-1