Loading...
14-5
Creating Web Certificates
14.3. Downloading the Server Private Key
When configuring the RPC's SSL/TLS encryption feature (or setting up other security/
authentication features), it is recommended to download and save the Server Private
Key. To download the Server Private Key, access the Text interface using a password
that permits access to Administrator level commands and then proceed
as follows:
1. Type /N and press [Enter] to display the Eth0/IPv4 (Shared) Network
Parameters menu.
2. At the Eth0/IPv4 (Shared) Network Parameters menu, type 23 and press [Enter] to
display the Web Access menu (Figure 14.1.)
a) To download the Server Private Key from the RPC unit, make certain that SSL/
TLS parameters have been defined as described in Section 14.1, then type 13
and press [Enter] to display the CRT Commands submenu.
b) At the CRT Commands submenu, type 2 and press [Enter] to display the
Signed CRT Certificate Copy the resulting CRT certificate to a text file and save
the text file on your hard drive.
3. To upload a previously saved CRT Certificate to the RPC unit, make certain that
SSL/TLS parameters have been defined as described in Section 14.1, return to the
Web Access menu as described in Steps 1 and 2 above, then type 13 and press
[Enter] to display the CRT Commands Submenu.
a) At the CRT Commands submenu, type 1 and press [Enter] to select the
Upload Signed CRT Certificate option.
b) Use your communications program to send the binary format Signed
Certificate to the RPC unit. When the upload is complete, press [Escape] to
exit from the CRT Commands submenu.
c) After you exit from the CRT Server Key submenu, press [Escape] several
times until you have exited from the Network Parameters menu and the "Saving
Configuration" message is displayed.
14.4. Harden Web Security
In the Web Access Menu, the Harden Web Security option allows you to disable SSLv3
and MEDIUM ciphers for incoming web connections.
14.5. TLS Mode
The TLS Mode parameter in the Web Access menu selects the TLS version(s) that the
web server will accept from incoming web connections.
Loading...
Terms of Use | Privacy Policy | DMCA Policy
2006-2020 Rsmanuals.com