Lenovo ThinkSystem NE2552E, Application Manual

Page: 36 / 574

36
NE2552E Application Guide for ENOS 8.4
Configuring HTTPS Access to the BBI
The BBI can also be accessed via a secure HTTPS connection.
1.
Enable HTTPS.
By default, BBI access via HTTPS is enabled on the switch. To disable or re ‐ enable
BBI access via HTTPS, use the following commands:
2.
Set the HTTPS server port number (optional).
The default HTTPS web server port to access the BBI is port 443. However, you can
change the default Web server port with the following command:
3.
Generate the HTTPS certificate.
Accessing the BBI via HTTPS requires that you generate a certificate to be used
during the key exchange. A default certificate is created the first time HTTPS is
enabled, but you can create a new certificate defining the information you want to
be used in the various fields.
4.
Save the HTTPS certificate.
The certificate is valid only until the switch is rebooted. To save the certificate so
that it is retained beyond reboot or power cycles, use the following command:
When a client (such as a web browser) connects to the switch, the client is asked to
accept the certificate and verify that the fields match what is expected. Once BBI
access is granted to the client, the BBI can be used as described in the Lenovo ENOS
BBI Quick Guide .
NE2552E(config)# no access https enable
(Disable HTTPS access)
‐ or ‐
NE2552E(config)# access https enable
(Enable HTTPS access)
NE2552E(config)# access https port
<x>
NE2552E(config)# access https generate-certificate
Country Name (2 letter code) []:
<country code>
State or Province Name (full name) []:
<state>
Locality Name (eg, city) []:
<city>
Organization Name (eg, company) []:
<company>
Organizational Unit Name (eg, section) []:
<org. unit>
Common Name (eg, YOUR name) []:
<name>
Email (eg, email address) []:
<email address>
Confirm generating certificate? [y/n]: y
Generating certificate. Please wait (approx 30 seconds)
restarting SSL agent
NE2552E(config)# access https save-certificate