Blue Arc Titan SiliconServer, Руководство системного администратора

Страница: 479 / 487

Providing an SSL Certificate
467 Titan SiliconServer
Providing an SSL Certificate
Both the Titan and SMU are pre-configured with default SSL certificates. These default
certificates should provide an acceptable level of security for most users. For added security,
this certificate may be replaced with a certificate signed by a Certificate Authority (e.g.
Verisign).
Requesting and Generating Certificates
To request a certificate from a certificate authority (CA):
1. Generate a custom private key [optional].
2. Generate a Certificate Signing Request (CSR).
Generating a Private Key
The SMU already contains a default private key from which a CSR may be generated. It uses
default BlueArc values:
• Common Name (CN) uses the SMU’s hostname but other values are BlueArc specific
e.g. OU=., O=BlueArc, L=San Jose, ST=CA, C=US
• Valid for 3650 days (10 years).
• Key length of 2048 bits.
To view these values by displaying the SMU's default certificate, type the following at the SMU
CLI:
cert-showall.sh
If other values must be used, a custom private key may be generated via the following steps:
1. Log onto the SMU (through ssh or through its serial port) as the user manager, then
type:
sudo cert-gencustom.sh
Enter the manager user’s password when prompted.
Delete Package To delete a package, select it from the list and click the Delete
Package button.