ProCurve 800, Configuration Manual, Page: 190 / 406

3-62
Initial Setup of the ProCurve NAC 800
Digital Certificates
4. Restart the HTTPS server.
As an optional final task, you might transfer the self-signed certificate off the
NAC 800 and install it as a trusted CA root certificate on endpoints.
As you must complete these tasks, you must access the root command line
for the NAC 800’s OS:
1. Open an SSH session with the NAC 800.
2. Log in:
• username = root
• password = < root password >
Generate the Self-Certificate and Key
When keytool generates a public/private keypair, the utility automatically
creates a self-signed certificate around the public key. Follow these steps:
1. Log in to the NAC 800 as root.
2. Move to the /usr/local/nac/keystore directory.
ProCurve NAC 800:/# cd /usr/local/nac/keystore
3. Enter this command:
4. For example:
ProCurve NAC 800:/usr/local/nac/keystore:# keytool
-genkey -alias mynac.procurve.com -keyalg RSA
-keystore compliance.keystore
5. When prompted, enter changeit for the keystore password. You must
enter this password.
6. Next you are prompted to enter information that will be included in the
certificate that uses this key. For the first and last name, enter the NAC
800’s FQDN.
Syntax: keytool -genkey -alias < keyname > -keyalg [rsa | dsa] -keystore compli-
ance.keystore
Replace
< keyname >
with a name that you choose for the key’s alias
in the
compliance.keystore
file. Make a note of the name: you will
need it when you generate a certificate request or self-signed
certificate that uses this keypair.
The asymmetric algorithms supported by the NAC 800 for the
keypair include RSA and DSA; choose one or the other for the
-keyalg
option.