Athena NGFW (Next-Generation Firewall)

Athena NGFW (previously known as Network Secure) provides comprehensive protection for every network perimeter, ensuring the safety of your valuable assets, data, and users from emerging threats.
{{ $t('productDocDetail.guideClickSwitch') }}
{{ $t('productDocDetail.know') }}
{{ $t('productDocDetail.dontRemind') }}
8.0.107
{{sendMatomoQuery("Athena NGFW (Next-Generation Firewall)","Certificates")}}

Certificates

{{ $t('productDocDetail.updateTime') }}: 2026-02-05

You can manage certificates on the Certificates page, as shown in the following figure.

You can click Import Certificate to import an offline certificate, as shown in the following figure.

The parameters are described as follows:

Name: Set a name for the certificate as required.

Status: Specify whether to enable the certificate.

Certificate Type: Options include CER Server Certificate (*.cer/*.crt), CER Root Certificate (*.cer/*.crt), PKCS#12 (*.pfx/*.p12), PKCS#7 (*.p7b), PKCS#7 Encryption Certificate (*.p7b), and Signature & Encryption Certificates (*.cer/*.crt).

If you select CER Server Certificate (*.cer/*.crt), the Verification Key comes from the request list. You must select the request corresponding to the certificate to be imported, as shown in the following figure.

If you select CER Root Certificate (*.cer/*.crt), the dialog box appears as follows:

 

If you select PKCS#12 (*.pfx/*.p12), the password is the same as that you entered when the certificate was exported or generated. The certificate can be imported only when the root certificate and password are correct, as shown in the following figure.

If you select PKCS#7 (*.p7b), the Verification Key comes from the request list. You must select the request corresponding to the certificate to be imported, as shown in the following figure.

If you select PKCS#7 Encryption Certificate (*.p7b), the Verification Key comes from the request list. You must select the request corresponding to the certificate to be imported. In addition, you must import the encryption certificate and private key file, as shown in the following figure.

If you select Signature & Encryption Certificates (*.cer/*.crt), the Verification Key comes from the request list. You must also import the root certificate, level 1 CA certificate, signature certificate, encryption certificate, and private key, as shown in the following figure.

Click OK. The certificate appears in the certificate list. You can edit and download it, as shown in the following figure.

If the certificate is a root certificate, you can download a CA root certificate. If the certificate is a non-root certificate, you can download a CA root certificate or PKCS#12 certificate (*.pfx/*.p12).