Basic Configuration for SSL VPN 35novdocx (en) 16 April 20104 Select Hostname and Name Servers, then press Enter.5 Specify the IP addresses of the DNS servers that you want to add.6 Specify the domain names.7 Click OK.Verify that the DNS servers and domain names are added to the /etc/resolv.conf file.2.6 Configuring Certificate SettingsAccess Manager components and agents can access the keystore to retrieve certificates, keys, andtrusted roots as needed.When SSL VPN server is installed, it creates a test-connector certificate with the default DNS nameof the SSL VPN server. However, if you have changed the default DNS name of the SSL VPNserver, then you must create a new certificate and replace the test-connector.The following instructions assume that you have already created a certificate. For more informationon creating certificates, see “Security and Certificate Management” in the Novell Access Manager3.1 SP2 Administration Console Guide.Before you proceed with the configuration, log in to the Administration Console, select Security >Trusted Roots, click the down arrow for the trusted root that you are interested in. Make sure thattwo SSL VPN trust stores are displayed. If they do not exist, you must manually push the certificatesto the trust store.NOTE: Make sure that SSL VPN certificate names contain only alphanumeric characters, space,underscore (_), hyphen (-), the at symbol @, and the dot (.).1 In the Administration Console, select Devices > SSL VPN > Edit.2 Select SSL VPN Certificates from the Security settings section.3 Click SSL Cert.Certificates in the SSL VPN STunnel are used by SSL VPN services for encryption. This pagecontains the following information:Keystore name: Displays the name of the keystore to which the certificate belongs.Keystore type: Displays the type of keystore. It can be Java, PEM, or PKCS12.Device: Displays the IP address of the SSL VPN device.
