Optical Systems Design OSD2524, User Manual

Page: 69 / 402

OPTICAL SYSTEMS DESIGN
DOC ID: 10120001
OSD2524 OPERATOR MANUAL
PAGE 69
This page allows you to configure the HTTPS settings and maintain the current certificate on
the switch.
Mode
Indicate the HTTPS mode operation.
Possible modes are:
Enabled
: Enable HTTPS mode operation.
Disabled
: Disable HTTPS mode operation.
Automatic Redirect
Indicate the HTTPS redirect mode operation. It is only significant when "HTTPS Mode Enabled" is
selected. When the redirect mode is enabled, the HTTP connection will be redirected to HTTPS
connection automatically.
Notice that the browser may not allow the redirect operation due to the security consideration unless the
switch certificate is trusted to the browser. You need to initialize the HTTPS connection manually for this
case.
Possible modes are:
Enabled
: Enable HTTPS redirect mode operation.
Disabled
: Disable HTTPS redirect mode operation.
Certificate Maintain
The operation of certificate maintenance.
Possible operations are:
None
: No operation.
Delete
: Delete the current certificate.
Upload
: Upload a certificate PEM file. Possible methods are:
Web Browser
or
URL
.
Generate
: Generate a new self-signed RSA certificate.
Certificate Pass Phrase
Enter the pass phrase in this field if your uploading certificate is protected by a specific passphrase.
Certificate Upload
Upload a certificate PEM file into the switch. The file should contain the certificate and private key
together. If you have two separated files for saving certificate and private key. Use the Linux cat
command to combine them into a single PEM file. For example, cat my.cert my.key > my.pem
Notice that the RSA certificate is recommended since most of the new version of browsers has removed
support for DSA in certificate, e.g. Firefox v37 and Chrome v39.
Possible methods are:
Web Browser
: Upload a certificate via Web browser.
URL
: Upload a certificate via URL, the supported protocols are HTTP, HTTPS, TFTP and FTP. The URL
format is <protocol>://[<username>[:<password>]@]< host>[:<port>][/<path>]/<file_name>. For
example, tftp://10.10.10.10/new_image_path/new_image.dat,