Prima IP User Manual Rev 1.5 2007
- -
45
4.5
MAIN/Security – Certificates, Viewer Encryption
and Password Policies
The Security page enables you to configure and implement security-related settings of your Prima IP, such as
uploading your certificates for the Prima IP server side, selecting the security level of the viewer connections,
and the password policy for the viewer and browser connections.
Security settings should be taken very seriously
. If
Prima IP
security settings are set to
No
Password,
no SSL, and no PKI authentication (Viewer connection security - Level 1), almost
anyone can establish a remote connection. With these settings, you probably will not "survive"
longer than 15mn on the Internet without someone is trying to access your computers.
After you have made all modifications, click
Store Settings
to save your settings and then hit
Apply
Settings/Restart Servers
to validate these new settings.
No change you have made on this page will apply until you hit
Apply Settings/Restart Servers
!
4.5.1 Certificates and Keys
Certificates are only needed if you intend to implement full PKI authentication for the viewer connections. If
an SSL-encrypted session is already enough for your security requirements, you can just ignore this aspect of
PKI authentication.
Where can you get the certificates? There is a default set of certificates in your support CD ROM. You can
use them to practice the certificates uploads. In real world scenario, you can either generate the certificates
by yourself, since there are some freeware or shareware such as XCA for this purpose. You can also buy
certificates from companies that provide authentication service.
The valid file names and formats of the certificates and Keys to be uploaded to the Prima IP should be
exactly as below:
•
root.crt
•
server.crt.
•
serverkey.pem
•
ldapcert.crt
•
ldapkey.pem
4.5.2 Security Level of Viewer Connections
The browser connections to the web management are
always
using SSL connections. The viewer
connections can use different levels of security.
