Enabled

Controls whether X.509 certificate authentication is enabled. X.509 certificate authentication cannot be enabled unless the CA Trust Anchors Privacy Enhanced Mail (PEM) file exists on the file system.

CA Trust Anchors PEM File

This is a PEM file that should contain all CA trust anchors used to verify X.509 certificates. Multiple entries should be concatenated together.

CA Intermediaries PEM File

This is a PEM file that should contain all intermediate CAs used to construct trust chains used to validate certificates. These certificates are not implicitly trusted and are only used in reconstructing the trust chain. Multiple entries should be concatenated together.

CRL File

This is a PEM file that should contain all certificate revocation lists used to revoke X.509 certificates. Multiple entries should be concatenated together.

Authentication Mode

The method used to authenticate X.509 certificate users. Select one of the following options:

• Accept X.509 Certificate or Password: The user will be authenticated if either a valid certificate or a valid password is provided.

• Require X.509 Certificate: The user will be authenticated only if a valid certificate is provided. Any password entered by the user is ignored.

• Require X.509 Certificate and Password: The user will be authenticated only if both a valid certificate and valid password is provided.