PKI Configuration Dialog Box

Use the PKI Configuration dialog box to configure PKI settings for Reflection SSL/TLS sessions.

Note: To configure PKI settings for Secure Shell sessions use the PKI tab in the Reflection Secure Shell Settings dialog box.

The options are:

	Certificate host name must match host being contacted	Specifies whether host name matching is required when validating host certificates. When this setting is enabled (the default), the host name you configure in Reflection must exactly match a host name or IP address entered in either the CommonName or the SubjectAltName field of the certificate.
	Use OCSP	Specifies whether Reflection checks for certificate revocation using OCSP (Online Certificate Status Protocol) responders when validating host certificates. OCSP responders may be specified in the AIA extension of the certificate itself. You can also specify OCSP responders using the OCSP tab in the Reflection Certificate Manager. A protocol (using the HTTP transport) that can be used as an alternative to CRL checking to confirm whether a certificate is valid. An OCSP responder responds to certificate status requests with one of three digitally signed responses: "good", "revoked", and "unknown". Using OCSP removes the need for servers and/or clients to retrieve and sort through large CRLs.
	Use CRL	Specifies whether Reflection checks for certificate revocation using CRLs (Certificate Revocation Lists) when validating host certificates. CRLs may be specified in the CDP extension of the certificate itself. You can also specify CRL using the LDAP tab in the Reflection Certificate Manager. A digitally signed list of certificates that have been revoked by the Certification Authority. Certificates identified in a CRL are no longer valid. Note: The default value of this setting is based on your current system setting for CRL checking. To view and edit the system setting, launch Internet Explorer, and go to Tools > Internet Options > Advanced. Under Security, look for Check for server certificate revocation.
	Client Authentication	When Find certificate for authentication is selected, all available personal certificates are presented to the server for client authentication. To specify a particular certificate, select Use selected certificate for authentication, then click Select to specify which certificate.
	Reflection Certificate Manager	Opens the Reflection Certificate Manager, which you can use to manage certificates in the Reflection stores and to specify PKI settings.
	View System Certificates	Opens the Windows Certificate Manager, which you can use to manage certificates in your system stores.