The Excelerator appliance has public key infrastructure mechanisms for generating, importing, using, and maintaining public key certificates. These include:
The appliance uses these auto-generated certificates for certain appliance-specific secure communications, such as obtaining filtering lists.
These can also be used for secure connections with browsers using appliance caching services. However, browsers won't recognize the appliance CA unless they are specifically configured to do so. This causes confirmation messages to be generated that can confuse users and cause them to not use the appliance's caching services.
To create appliance-specific certificates, see the instructions in Creating Certificates Using the Appliance CA.
Generating a CSR is the first step to obtaining a certificate from an external CA.
After you obtain certificates from one or more external CAs, you can use the appliance certificate maintenance features to monitor certificate status, back up certificates in case the appliance fails, and replace certificates when they expire.
To generate a CSR and store the issued certificate, complete all the instructions in Obtaining a Certificate from an External CA
Because the creation process is different for internal and external certificates, they are described separately. See the instructions in Creating Certificates Using the Appliance CA and Obtaining a Certificate from an External CA.