LEGRAND Raritan SRC-0100, User Manual

Page: 191 / 698

Chapter 6: Using the Web Interface
179
Field/setting Description
Client certificate,
Client private key,
Client private key
password
This field appears when 'EAP', 'PEAP' and 'TLS'
are all selected.
PEM encoded X.509 certificate and PEM encoded
private key are required for certification-based
authentication methods. Private key password is
optional.

SRC supports private keys of PKCS#1 and
PKCS#8 formats.

Client Private Key Password should be entered
only when your private key is encrypted with a
password.

To view the uploaded certificate, click Show
Client Certificate.

To remove the uploaded certificate and private
key, click 'Clear Key/Certificate selection'.
CA certificate
This field appears when 'EAP' is selected.
A third-party CA certificate may or may not be
needed. If needed, follow the steps below.
RADIUS
authentication
server name
This field appears when 'EAP' is selected.
Type the name of the RADIUS server if it is
present in the TLS certificate.

The name must match the fully qualified
domain name (FQDN) of the host shown in the
certificate.

Available settings for the CA Certificate:
If the required certificate file is a chain of certificates, and you are not
sure about the requirements of a certificate chain, see
TLS Certificate
Chain
(on page 665).
Field/setting Description
Enable verification
of TLS certificate
chain Select this checkbox for the SRC to verify the
validity of the TLS certificate that will be installed.

For example, the SRC will check the
certificate's validity period against the system
time.