ProCurve 800, Configuration Manual

Page: 253 / 406

4-59
Configuring the RADIUS Server—Integrated with ProCurve Identity Driven Manager
Manage Digital Certificates for RADIUS
c. Enter this command:
For example:
pscp mycertificate.pem root@10.1.1.20://etc/raddb/certs/mycertifi-
cate.pem
d. Repeat the previous command to transfer the private key file, if
separate from the certificate file:
For example:
pscp mycertificate.pem root@10.1.1.20://etc/raddb/certs/mykey.pem
N o t e
The private key and server certificate might be stored in the same file. In
this case, you only need to enter the command once and you should
specify the output file:
/etc/raddb/certs/cert-srv.pem .
This allows the NAC 800 to use the new certificate without forcing you to
alter the “tls” section of the
/etc/raddb/eap.conf file—which can lead to
errors.
e. When prompted, enter the NAC 800’s root password.
3. Log in to the NAC 800 as root.
4. Enter this command:
ProCurve NAC 800:/# cd /etc/raddb/certs
Syntax: pscp < path\filename > root@< NAC 800 IP address >://etc/raddb/certs/
< certificate_filename >
Replace
< path\filename >
with the directory path and filename
for the server certificate. Replace
< certificate_filename >
with
the name under which the certificate will be stored on the NAC
800.
Syntax: pscp < path\filename > root@< NAC 800 IP address >://etc/raddb/certs/
< key_filename >
Replace <
path\filename >
with the directory path and filename
for the private key. Replace
< key_filename >
with the name
under which the private key will be stored on the NAC 800.