ControlByWeb X-600M, Руководство пользователя

Страница: 40 / 158

Setup Pages X-600M Users Manual
for setting up multiple units that will function similarly, but will require different network configurations.
The second option,
Use Default Password , allows a settings file to be imported with the username and
password forced to their default values. This option is useful when the settings need to be loaded to a
device and the username and/or password for the administrator have been forgotten.
When importing settings, they must be C ommitted before taking effect. Remember to backup your
settings to a file in case the unit ever needs to be reset to factory defaults and you wish to preserve the
settings.
4.1.5 System > SSL Certificates
The X-600M supports secure connectivity to the internal web server using a Secure Sockets Layer
(SSL) certificate. An SSL certificate works to establish a secured and encrypted connection between the
X-600M and the web browser. With this secured connection, all data passed back and forth to the X-
600M will be encrypted and protected from interception.
SSL certificates have three components. The Certificate Signing Request (CSR), the public key, and the
private key. When a new certificate is created on the X-600M, it will automatically generate all three of
these components. The CSR is used to allow a Certificate Authority (CA) to digitally sign and create a
public key. This public key will be sent to web browsers that access the X-600M. The private key is
generated by the X-600M when the certificate is made and is intended to never be accessed outside of
the X-600M. The private key will be used to decrypt data that has been encrypted by the public key in
the remote web browser. Conversely, the public key is needed to decrypt data the X-600M encrypts with
the private key.
When a web browser initiates the handshake to establish a secure connection, it tries to validate the
authenticity of the SSL certificate. Primarily, it looks to ensure the name on the certificate matches the
domain name used to connect with the X-600M. Additionally, it will ensure the certificate is valid for the
current date and time and that the certificate has been digitally signed by a trusted Certificate Authority
(CA). If any of these conditions are not met, the web browser will show the user a warning stating that
the web server may not be secure or that it cannot be verified.
An SSL certificate needs to be either self-signed or signed by a CA. Self-signed SSL certificates will
cause the web browser to issue a warning to the user unless the self-signed certificate is added to the
list of trusted certificates kept by the operating system. SSL certificates signed by a trusted CA (such as
DigiCert, VeriSign, Comodo, etc.) will not show a warning to the user and is what you will find on many
commercial websites. However, both certificate signing options will behave the same in how they secure
the data being transferred across the network. Additionally, multiple SSL certificates can be stored on the
X-600M, but only one may be in use at any given time.
Page 38 Xytronix Research & Design, Inc.