Creating a local certificate group

Local certificate groups are used to facilitate the configuration of profiles that are associated with a virtual server.

Before you begin, you must:

Have Read-Write permission for System settings.
Have already added the certificates to the local certificate store and intermediate CAs to the intermediate certificate store, and created an intermediate CA group.
Optionally, create an OCSP Stapling configuration.

The configuration page displays the Local Certificate Group tab.

Click + Add to display the configuration editor.
Enter the Group Name. Valid characters are A-Z, a-z, 0-9, _, and -. No spaces. The maximum length is 35 characters. After you initially save the configuration, you cannot edit the name.
Click Save.
To add Group Members to a Local Certificate Group, double-click the group or click the (edit) icon in the row of the group that you want to modify.
Click + Add.
Complete the configuration as described in Table 123.
Click Save.

Table 123: Local certificate group configuration
Settings	Guidelines
Local Certificate	Select the certificate to add to the group.
OCSP Stapling	Select an OCSP Stapling configuration. The local certificate in the OCSP Stapling configuration must match the local certificate in the local certificate group member. See "OCSP stapling" on page 1.
Intermediate CA group	Select the Intermediate CA group to add to the local group. (Optional)
Default	Check this check box only if you want to make this local certificate the default for the group. Note: Only one local certificate can be set as the default in a group. If one local certificate has already been set as the default, you must disable (uncheck) it in order to set another one as the default. By default, the first local certificate in the group becomes the default if no local certificate is set as the default,