ControlByWeb X-600M, Руководство пользователя

Страница: 41 / 158

X-600M Users Manual Setup Pages
4.1.5.1 Default Self-Signed SSL Certificate
The X-600M includes a default, self-signed SSL certificate uniquely generated and ready for use;
however, since this certificate is self-signed, you will see a warning page from your web-browser
stating the web server may be untrusted. This self-signed certificate has an expiration date of 200
years from the time it was generated and cannot be deleted. It is recommended to generate a new
self-signed SSL certificate.
4.1.5.2 Generating a New Certificate
Generating a new SSL certificate is not required for using HTTPS or securing the connection as a
default certificate is already available. However, generating a new SSL certificate will allow you to
use your organizations information as well as to get it signed by a CA. To start, click on the
Generate New Certificate button in the top right corner of the SSL Certificates screen. A pop-up will
open and allow you to fill in the information. Once the information has been filled out and submitted,
the X-600M will self-sign the certificate for immediate use. Instructions on having the certificate
signed by a CA are in the next section.
Certificate Name:
This is the name you will use to identify the certificate in the X-600M web interface. These
names must start with a letter, and contain only letters, numbers or the underscore character.
(e.g. testing_cert)
Country Code:
Two letter country code for the country where the X-600M will be used. (e.g. US)
State or Province Name:
Full name of the state or province the X-600M will be used in. (e.g. Utah)
City or Locality Name:
Full name of the city or locality the X-600M will be in. (e.g. Nibley)
Organization Name:
Full exact name of your organization with no abbreviations. (e.g. Xytronix Research & Design,
Inc.)
Organizational Unit Name:
Full organizational unit name. This is less important and can be something simple. (e.g. IT)
Common Name:
This is the domain name you will be accessing the X-600M from. If this does not match what is
placed in the browser when accessing the X-600M, your web browser will return a warning. (e.g.
X600.ControlByWeb.com)
No special work is needed in the X-600M to assign it a (sub)domain name. So long as an “A”
record exists in your DNS server to map the (sub)domain name to the X-600M IP address.
Email Address:
Allows you to place your e-mail address in the certificate information.
Encryption Strength:
This option allows you to specify the encryption strength of the data during the handshake phase
between the X-600M and the web browser. Some CA's have a restriction on this value. The
trend for the CA's is to have 2048-bit encryption strength. Certificates generated using 2048-bit
encryption can take up to six minutes to generate.
Xytronix Research & Design, Inc. Page 39