Bandura Cyber TIG BT-500, Руководство пользователя

Страница: 67 / 93

Like many similar security certificates, the one that comes with your Bandura Cyber TIG has an
expiration date, which you can see if you view
​ the existing ​ ​ certificate ​ on the HTTP Settings
menu screen.
Do
​ ​ not ​ ​ let ​ ​ the ​ ​ certificate ​ ​ expire, ​ ​ otherwise ​ ​ you ​ ​ may ​ ​ not ​ ​ be ​ ​ able ​ ​ to ​ ​ access ​ ​ the ​ ​ Bandura Cyber
TIG, and ​ ​ you ​ ​ will ​ ​ have ​ ​ to ​ ​ reset ​ ​ it ​ ​ using ​ ​ Maintenance ​ ​ Mode ​ . Before the existing certificate
expires, either create a new self-signed certificate, or request one that is authoritatively-signed
by a Certificate Authority. Your organization may have its own Certificate Authority, or you can
purchase one from a commercial organization.
To get an authoritatively-signed certificate, you have to first generate a Certificate
​ ​ Signing
Request ​ . From the HTTP Settings screen, click on ​ Generate ​ ​ CSR ​ ​ and make sure you have the
Crypto Admin ​ role.
Fill out the following fields:
Generate New Private Key Uncheck this option if you want to reuse your private key.
Country Two letter country name abbreviation. Use SSL Country
Codes, listed here:
​ http://www.digicert.
com/ssl-certificate-country-codes.htm
State Spell out the full name of your state or province.
Location Spell out the full name of your city, town, or locality
Organization Do not use abbreviations. This may contain upper and lower
case characters, spaces, or numbers, but no symbols that need
a shift key to type, such as shift-1, the exclamation point.
Organizational Unit Your particular department. If you are generating a certificate
as an individual, put your fictitious or Doing Business As (DBA)
name here.
Common Name Typically the fully qualified domain name (FQDN) of the
Bandura Cyber TIG, such as: Bandura Cyber
TIG.example.com. If your Common Name has no periods, then
this will generate a certificate for an intranet device. This must
exactly match the domain name that your web browser will use
to access the Bandura Cyber TIG.
Email Address Optional for self-signed certificates. When you are requesting
an authoritatively signed certificate, the precise email address
you use depends on the requirements of the Certificate
Authority.
66