## Intel Packet Protect Certificate Support

Before you can install Intel Packet Protect Certificate Support, the following conditions must be met:

- PROSet II is installed, and IPSec is enabled

- Intel Packet Protect is installed

- Entrust/Entelligence* is installed on your system, and an Entrust profile file (.epf) has been created

If any of these conditions are not met, click on the bullet item to see instructions.

### To Enable Certificate Support

| NOTE: This procedure causes Intel Packet Protect to restart, which takes several seconds. During this time, IP security is momentarily disrupted: any outgoing messages will be sent in the clear, and any secure incoming messages will be discarded.

1. Run the Certificate Support installer program:
   Start menu -> Programs -> Intel Packet Protect -> Configure Certificate Support

2. Read the license agreement and click Next.

3. The Configure Certificate Support window appears.
   When the Stop button is disabled, it indicates that certificate support is currently disabled.

4. The setup program locates the Entrust .ini file. If your Entrust administrator wants you to use another .ini file, use the Browse button to locate that file.
   The setup program also locates the profile that you created when you installed Entrust/Entelligence on your system. (Entrust profiles have an .epf extension.) If your Entrust administrator wants you to use another .epf file, use the Browse button to locate that file.
   Click Next. The setup program installs files and configures Intel Packet Protect to use the certificate instead of the system policy. Be patient, as this may take up to a minute to complete the installation. You will then be asked to log on to Entrust.

5. Click OK.
   Part of the configuration process requires Intel Packet Protect to restart.

| NOTE: You should now go back to the Packet Protect and set up your rules to use the certificate.

### To Disable Certificate Support

| NOTE: Disabling certificate support causes Intel Packet Protect to switch from using the certificate to using pre-shared keys. Any rules that specify the certificate in the Rule Editor dialog will not be able to use the certificate, and so whatever fallback action is specified will become active. Intel Packet Protect also restarts, which takes several seconds. During this time, IP security is momentarily disrupted: any outgoing messages will be sent in the clear, and any secure incoming messages will be discarded.

1. Run the Configure Certificate program:
   Start menu -> Programs -> Intel Packet Protect -> Configure Certificate Support

2. The Configure Certificate Services window appears.
   When the Stop button is enabled, it indicates that certificate support is currently running.

3. Click the Stop button.

4. A confirmation dialog appears. Click OK.

| NOTE: Be sure to update your rules to use the system policy instead of the certificate.

Copyright © 2002 Intel Corporation. Legal Information