Cambium Networks PTP 650 Series, Руководство пользователя

Страница: 308 / 395

Chapter 6: Configuration and alignment Security menu
Security menu
This section describes how to configure HTTPS/TLS security using the Security Wizard.
Caution
Ensure that the operator’s security requirements are configured before connecting the
PTP 650 to the network. Otherwise, security may be compromised.
Preparing for HTTPS/TLS
Before running the Security Configuration Wizard, obtain the necessary cryptographic material and
ensure that the unit has AES capability. For more information, refer to
Planning for HTTPS/TLS
operation on page 3-33 .
Procedure:
1 Ensure that the following cryptographic material has been generated:
•
Key Of Keys
•
TLS Private Key and Public Certificates (for the correct IP address)
•
User Defined Security Banner
•
Random Number Entropy Input
2 Order the necessary AES capability upgrade, generate a license key and enter it on the
Software License Key page (
Software License Key page on page 6-12 ).
3 Identify the Port numbers for HTTPS, HTTP and Telnet.
4 Ensure that the web browsers used are enabled for HTTPS/TLS operation.
5 On the Local User Accounts page ( Local User Accounts page on page 6-42 ), check that:
•
Either: Identity Based User Accounts are set to Disabled,
•
Or: Identity Based User Accounts are set to Enabled and the current user's role is
Security Officer.
Page
6-75