Media5 Mediatrix 4104, Reference Manual

Page: 208 / 466

Chapter 12 - Configuration File Download Configuration File Download Server
186 Mediatrix 4104
Configuring the HTTPS Server
If you are to perform a configuration file download that requires authentication or privacy by using the HTTP
over the Transport Layer Security (TLS) protocol (HTTPS), you must install a HTTPS server running on the
PC designated as the server host. It is assumed that you know how to set the root path and set the SSL/TLS
security configuration. If not, refer to your HTTPS server’s documentation.
The Mediatrix 4104 supports the following SSL/TLS parameters:
Certificates
The Mediatrix 4104 contains embedded security certificates formatted as per ITU x.509 and RFC 3280. The
certificates are factory-installed. The name of X.509 certificates currently installed in the Mediatrix 4104 are
listed in the
securityCertificatesMIB under the certificateName variable (under the certificateTable group). You
must have at least one matching certificate on your HTTPS server.
Standards Supported • RFC 2246 – The TLS Protocol Version 1.0
• RFC 2818 – HTTP Over TLS
• RFC 2459 – X.509 Digital Certificates
• RFC 3280 – Internet X.509 Public Key Infrastructure
Certificate and Certificate Revocation List (CRL) Profile
Note:
The web interface does not support the HTTPS protocol.
Caution:
You must have a time server SNTP that is accessible and properly configured, or the automatic
configuration update feature may not work properly. It is assumed that you know how to configure your
SNTP server. If not, refer to your SNTP server’s documentation. You can also refer to
“Chapter 20 - SNTP
Settings” on page 287 for more details on how to configure the Mediatrix 4104 for a SNTP server.
Table 114: Secure Parameters Supported
Supported Parameter Description
Key Exchange Mechanism • RSA
• Diffie-Hellman
Ciphers • AES (128 and 256 bits)
• 3DES (168 bits)
Message Digests • SHA-1
Note:
Media5 recommends to use cipher suites based on the RSA key exchange mechanism, because the
Diffie-Hellman key exchange mechanism introduces a noticeable delay in the HTTPS session
establishment.