Alvarion BreezeACCESS Wi2, Системное руководство

Страница: 187 / 252

Managing Certificates
BreezeMAX Wi² and BreezeACCESS Wi² System Manual 165
.
9.2.5 Certificate Usage
To see the services that are associated with each certificate, select Security > Certificate usage .
With the factory default certificates installed, the page will look like this:
9.2.5.1 Service
Name of the service that is using the certificate. To view detailed information on the certificate
select the service name.
9.2.5.2 Authenticate to Peer Using
Name of the certificate and private key. The AP is able to prove that it has the private key
corresponding to the public key in the certificate. This is what establishes the AP as a legitimate user
of the certificate.
9.2.5.3 Number of Associated CAs
Number of CA certificates used by the service.
NOTE
When a web browser connects to the AP using SSL, the AP sends only its own SSL certificate to
the browser. This means that if the certificate has been signed by an intermediate certificate
authority, and if the web browser only knows about the root certificate authority that signed the
public key certificate of the intermediate certificate authority, the web browser does not get the
whole certificate chain it needs to validate the identity of the AP. Consequently, the web browser
issues security warnings. To avoid this problem, install an SSL certificate on the AP only if it is
directly signed by the root certificate authority or if you have appended all certificates that make up
the chain.
Consequently, the web browser issues security warnings.
To avoid this problem, make sure that you install the entire certificate chain when you install a new
certificate on the AP.
NOTE
An SNMP trap is sent to let you know when the AP’s SSL certificate is about to expire if you enable
the
Traps
option on the
Management > SNMP
page and then click
Configure traps
and enable
the
Certificate about to expire trap
option under
Maintenance
.
Figure 9-4: Certificate Usage