AudioCodes MediaPack MP-114, Руководство пользователя

Страница: 72 / 164

User's Manual 72 Document #: LTRT-71405
MediaPack Series
6.5.1.4.2 Loading a Private Key
The device is shipped with a self-generated random private key, which cannot be extracted
from the device. However, some security administrators require that the private key be
generated externally at a secure facility and then loaded to the device through
configuration. Since private keys are sensitive security parameters, take precautions to
load them over a physically-secure connection such as a back-to-back Ethernet cable
connected directly to the managing computer.

To replace the device's private key:
1. Your security administrator should provide you with a private key in either textual PEM
(PKCS #7) or PFX (PKCS #12) format. The file may be encrypted with a short pass-
phrase, which should be provided by your security administrator.
2. If the device is operating in HTTPS mode, then set the 'Secured Web Connection
(HTTPS)' field (HTTPSOnly) to
HTTP and HTTPS . This ensures that you have a
method for accessing the device in case the new configuration does not work. Restore
the previous setting after testing the configuration.
3. Open the Certificates page ( Configuration tab > System menu > Certificates ) and
scroll down to the Upload certificate files from your computer group.
Figure 6-40: Upload Certificate Files from your Computer Group
4. Fill in the 'Private key pass-phrase' field, if required.
5. Click the Browse button corresponding to the 'Send Private Key' field, navigate to the
key file, and then click Send File .
6. If the security administrator has provided you with a device certificate file, load it using
the 'Send Device Certificate' field.
7. After the files successfully load to the device, save the configuration with a device
reset; the Web interface uses the new configuration.
8. Open the Certificates page again, and verify that under the Certificate information
group (at the top of the page) the 'Private key' read-only field displays "OK"; otherwise,
consult your security administrator.
9. If the device was originally operating in HTTPS mode and you disabled it in Step 2,
then enable it by setting the 'Secured Web Connection (HTTPS)' field to
HTTPS Only .