Axel AX3000 80, User Manual

Page: 46 / 224

Interactive Set-Up
36
AX3000 Models 80 and 85 - User's Manual
3.1.5 - SSL Security
To configure the thin client SSL security policy, select the [Configuration]-[Network]-[SSL
Security] menu. A dialog box as shown below is displayed:
a) TLS/SSL Client Version
The TLS/SSL client version can be selected: TLS 1.0, TLS1.1 or TLS 1.2.
b) Server Certificate
When an SSL connection is established it is advisable to check the server certificate.
This requires a CA certificate to be installed in the AX3000 Local Store. See Chapter 3.6.5.
The ' Reliability Verification ' option forces the server certificate to be checked against the thin
client
’s local CA certificates when an SSL connection is established. (HTTPS or NLA). For this
check to be possible there must be at least one CA certificate stored in the thin client
’s local store
(see chapter 3.6.5). A check is made between the thin client
’s local CA certificates and the server’s
certificate.
With this setting enabled there are two further optional checks.
- Date Verification (requires an NTP time server to be configured - See Chapter 3.2.6): A
check is made to confirm the connection request is initiated between the 'Valid After' and
'Valid Before' dates of the server certificate.
- FQDN Verification
: A check is made against the server’s FQDN or IP address as given in
the certificate’s 'Common Name' parameter
The
”Action on Error”
option sets the thin client
’s behavior when an SSL non-compliant situation
is met (See Chapter 4.4.3).
Note : the certificate verification is also used with the XML-SSL administration protocol. But in event
of an error no message box is displayed.
c) Authentication and Encryption Capabilities
The supported SSL cipher list is displayed below. Select cipher(s) to be announced during the SSL
negotiation.