IBM BladeCenter Management Module, User Manual

Page: 53 / 78

acts as an SSL server for secure Web server connections. The management
module acts as an SSL client for secure LDAP connections.
Table 4. Management module SSL connection support
Connection type SSL client SSL server
Secure Web server
(HTTPS)
Web browser of the user
(For example: Microsoft Internet Explorer)
Management-module
Web server
Secure LDAP
connection
(LDAPS)
Management-module LDAP client An LDAP server
You can view or change the Secure Sockets Layer (SSL) settings from the MM
Control
→
Security page. You can enable or disable SSL and manage the certificates
required for SSL.
Configuring security
Use the general procedure in this section to configure security for the management
module Web server and to configure security for the connection between the
management module and an LDAP server. If you are not familiar with the use of
SSL certificates, read the information in “SSL certificate overview” on page 44.
The content of the Security Web page is context-sensitive. The selections available
on the page change when certificates or certificate signing requests are generated,
when certificates are imported or removed, and when SSL is enabled or disabled
for the client or the server.
Use the following general tasks list to configure the security for the management
module:
1. Configure the Secure Web server:
a. Disable the SSL server. Use the SSL Server Configuration for Web
Server section on the MM Control
→
Security page.
b. Generate or import a certificate. Use the SSL Server Certificate
Management section on the MM Control → Security page. (See “SSL server
certificate management” on page 44.)
c. Enable the SSL server. Use the SSL Server Configuration for Web Server
section on the MM Control
→
Security page. (See “Enabling SSL for the
secure Web server” on page 50.)
2. Configure SSL security for LDAP connections:
a. Disable the SSL client. Use the SSL Client Configuration for LDAP Client
section on the MM Control → Security page.
b. Generate or import a certificate. Use the SSL Client Certificate
Management section on the MM Control
→
Security page. (See “SSL client
certificate management” on page 50.)
c. Import one or more trusted certificates. Use the SSL Client Trusted
Certificate Management section on the MM Control → Security page. (See
“SSL client trusted certificate management” on page 50.)
d. Enable the SSL client. Use the SSL Client Configuration for LDAP Client
section on the MM Control → Security page. (See “Enabling SSL for the
LDAP client” on page 52.)
3. Restart the management module for SSL server configuration changes to take
effect. For more information, see “Restart MM” on page 35.
Chapter 3. Using the management-module Web interface
43