Chapter 18: Access Management and Security (CLI)
Configuring X.509 CSR Certificates and HTTPS (CLI)
phn-3963_008v000
Page 18-12
Configuring X.509 CSR Certificates and HTTPS (CLI)
The web interface protocol for accessing PTP 850 can be configured to HTTP (default) or HTTPS. It cannot be set to
both at the same time.
Before setting the protocol to HTTPS, you must:
1
Create and upload a CSR file. See
Generating a Certificate Signing Request (CSR) File (CLI)
2
Download the certificate to the PTP 850 and install the certificate. See
Downloading a Certificate (CLI)
3
Enable HTTPS. See
When uploading a CSR and downloading a certificate, the PTP 850 functions as an SFTP client. You must install
SFTP server software on the PC or laptop you are using to perform the upload or download. For details, see
Installing and Configuring an FTP or SFTP Server
Note
For these operations, SFTP must be used.
This section includes:
•
Generating a Certificate Signing Request (CSR) File (CLI)
•
Downloading a Certificate (CLI)
•
•
Generating a Certificate Signing Request (CSR) File (CLI)
Generating a Certificate Signing Request (CSR) File (CLI)
To set the CSR parameters, enter the following command in root view:
root> platform security csr-set-parameters common-name <common-name>
country <country> state <state> locality <locality> organization
<organization> org-unit <org-unit> email <email> file-format <file-
format>
To display the currently-configured CSR parameters, enter the following command in root view:
root> platform security csr-show-parameters
If the IP address family is configured to be IPv4, enter the following command in root view to configure the SFTP
server parameters for the CSR file upload:
root> platform security csr-set-server-parameters server-ipv4 <server-
ipv4> server-path <server-path> filename <filename> server-username
<username> server-password <password>
If the IP address family is configured to be IPv6, enter the following command in root view to configure the SFTP
server parameters for the CSR file upload:
root> platform security csr-set-server-parameters server-ipv6 <server-
ipv6> server-path <server-path> filename <filename> server-username
<username> server-password <password>
To display the currently-configured SFTP parameters for CSR upload, enter the following command in root view:
Содержание PTP 850E
Страница 1: ...User Guide PTP 850E System Release 10 9 ...
Страница 48: ...Chapter 2 Getting Started PC Setup phn 3963_008v000 Page 2 5 Figure 10 Internet Protocol Properties Window ...
Страница 502: ...Chapter 19 Alarm Management and Troubleshooting CLI Performing Diagnostics CLI phn 3963_008v000 Page 19 29 ...