ProCurve 800, Configuration Manual

Page: 313 / 406

5-49
Configuring the RADIUS Server—Without Identity Driven Manager
Manage Digital Certificates for RADIUS
For example:
pscp root@10.1.1.20://etc/raddb/certs/myre-
quest.req nacrequest.req
c. When prompted, enter the NAC 800’s root password.
7. Submit the certificate request to your CA.
Contact your CA to learn how to complete this step. You should request
X.509 format (either Distinguished Encoding Rules [DER] or Privacy
Enhanced Mail [PEM]). However, if necessary you can convert a certifi-
cate that uses a different format. (See step 11.)
N o t e
If you are using a Windows CA, have the CA issue a certificate using the
RAS and IAS Server template (or another template that has key extensions
for both server authentication and client authentication).
8. After the CA returns the server certificate to you, transfer it to the NAC
800.
If you have installed PSCP on your management station, you can follow
these steps:
a. Save the certificate to your management station.
b. Access the command prompt on your management station and move
to the directory in which PSCP is installed.
c. Enter this command:
For example:
pscp mycertificate.pem root@10.1.1.20://etc/raddb/
certs/mycertificate.pem
d. When prompted, enter the NAC 800’s root password.
9. Log back in to the NAC 800 as root.
10. Enter this command:
ProCurve NAC 800:/# cd /etc/raddb/certs
Syntax: pscp < path\filename > root@< NAC 800 IP address >://etc/raddb/certs/
< certificate_filename >
Replace
< path\filename >
with the directory path and filename
for the server certificate. The certificate is saved with the
name that you specify for
< certificate_filename >
.