Configuration options
of the ServiceServer
19
Issue certificates for LAN IP as well
As in the section called “Issue certificates for WAN IP as well ” ”, the certificate can also be tied to
the LAN IP.
Default: enabled
Generate Server certificates
Caution
Before generating certificates, ensure that the device has the correct current time and that
the host and the domain names correspond with the ones for future operation.
The server certificate consists of a root certificate for issuing further certificates and a server certificate
used by applications such as OpenVPN or the webserver software. The Server certificate is the digital
passport of the Server. If these certificates are re-generated, all other certificates including the ones
of the VPN subscribers lose their validity.
If the web interface of the Server is accessed via HTTPS, for example https://
servicerouter.example.com, the browser compares the address called up to the one in the Server
certificate. In order to avoid error messages with regards the certificate, host names and domain names
should already be configured accordingly in the menu “Server configuration”
→
“Basic settings/LAN”.
In case these options are selected, this also applies to the WAN and LAN IP.
Caution
If there are clients "in action" while re-generating the server certificates, these clients
will no longer be able to connect unless new certificates are loaded to the clients or the
old server certificates are restored.
Press the button generate in order to generate new server certificates. Since random values are created
here, the length of this process may vary on occasion. The new certificates are available after a few
minutes.
If the certificates are created in the during VPN processes, these processes are terminated. Go to the
configuration site Server configuration -> OpenVPN in order to re-activate VPN functionality.
Import root certificate
In order to avoid browser alarm messages regarding the certificate, the root certificate can be imported
by the browser. In order to do so, click the button "import".
From now on there will be no further warning messages when accessing the web interface.
The next paragraph describes importing and deleting of the root certificate using Internet Explorers
8 a Mozilla Firefox 3.6.
Internet Explorer 8
Import of the root certificate
Clicking import opens a dialog box as in the following picture:
Summary of Contents for ServiceServer
Page 1: ...Eurogard Service Server Manual Falk Sch nfeld schoenfeld eurogard de...
Page 2: ...Eurogard Service Server Manual by Falk Sch nfeld Copyright 2011 2014 Eurogard GmbH...
Page 5: ...Eurogard Service Server v A Wichtige Begriffe 46...
Page 6: ...vi List of Figures 1 1 Eurogard ServiceServer 1 1 2 VPN concept of the Remoteserviceproducts 2...
Page 30: ...Configuration options of the ServiceServer 23 Click the tab Contents and then Certifikates...
