McAfee SG310, Administration Manual

Page: 347 / 412

McAfee UTM Firewall 4.0.4 Administration Guide 347
System menu features
Management menu
Installing your certificate in your browser
Use this procedure to install your manually created certificate into the Internet Explorer browser. The
certificate is already installed on the UTM Firewall appliance.
Prerequisites:
• Create a self-signed certificate manually with more detail than the shipped default. See
Creating an SSL
certificate .
• Enable HTTPS. See Web configuration .
When you access the Management Console using HTTPS, your Web browser may give warnings about the
authenticity of the certificate since it has not been signed by a known Certificate Authority. This procedure
installs the certificate in the browser to eliminate the Security Alert shown in
Figure 353 .
Security Alert: The warning given by your browser about the risks of installing a root-CA are well-warranted. It is
very important that you take care to protect your private root certificate. Should an untrusted party access your
root-CA, it would enable that party to generate SSL certs that your browser would silently accept, thus
compromising your security. Do not leave unencrypted backups of your SG configuration in unprotected places
and be wary of granting access to your SG appliance. Such risks are much reduced when using a commercial
root-CA.
Uploading a certificate signed by an authority is the most secure and recommend method, however. For
more information, see
Uploading an SSL certificate .
Figure 353 Certificate warnings
1
Access the UTM Firewall Web Management Console via your HTTPS URL.
2
When the IE browser’s Security Alert dialog box is displayed, click Continue to this website. After you
log on, the Management Console appears with a Certificate Error warning in the browser address bar
(
Figure 354 ).
Figure 354 Certificate Error warning in the browser address bar
3
Click the Certificate Error warning in the address bar, and then click View Certificate. The general
certificate information is displayed (
Figure 355 ).