45
CHAPTER 4: Advanced Operations
NOTES
Do NOT turn off power to the unit before this operation completes
successfully. It may take several minutes to write to flash memory.
The ServSwitch will sometimes reboot as part of the upgrade procedure,
depending on which system component is upgraded. You will have to
reconnect and re-login in those cases.
Wait at least two minutes after pressing Start. Do not assume the upload
did not work. There is no status indicator bar to show the progress of
the upload. The upload could simply be slow.
Each file that is distributed upgrades a different component of the
system. Therefore, be sure to apply all files you are given as part of an
upgrade. The system knows what to do with each file you give it, and
the files are checked for validity before being applied.
4.2.12 H
OW TO
U
PLOAD A
C
USTOM
C
ERTIFICATE
From the Setup and Administration Links screen (Figure 4-3), click on
Firmware
and flash memory management
, and then scroll down to the bottom of the screen.
Upload your own certificate to replace the factory-supplied SSL certificate here.
The ServSwitch requires an RSA private key and corresponding public certificate to
be combined into one PEM file. There should be no encryption on the private key
and it must be first in the file. Therefore, the ServSwitch expects a text file in this
format:
-----BEGIN RSA PRIVATE KEY-----
[based64 encoded key]
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
[based64 encoded certificate]
-----END CERTIFICATE-----
[end of file]
Uploading the root CA public certificate is optional and only affects the link on the
login page. It does not affect operation otherwise. It’s just an X.509 PEM file
holding a public certificate.
Summary of Contents for KV9304A
Page 2: ......