F5 6900, Руководство по платформе

Страница: 60 / 126

Chapter 6
6 - 4
Managing FIPS keys
The web-based Configuration utility provides a key management interface.
You can use the Configuration utility to create FIPS keys, convert existing
keys to FIPS keys, and import existing keys into the system.
Note
Once a key is converted to FIPS, the process cannot be reversed.
To create FIPS keys using the Configuration utility
1. On the Main tab of the navigation pane, expand Local Traffic , and
click SSL Certificates .
This opens the SSL Certificates screen which lists all certificates
installed on the LTM system.
2. On the upper-right portion of the screen, click Create .
The New SSL Certificates screen opens.
3. In the Name box, type a unique name for the certificate.
4. Using the Issuer setting, specify the type of certificate you want to
use:
• For a self-signed certificate, select Self .
• To request a certificate from a CA, select Certificate Authority .
5. Configure the Common Name setting and any other settings you
want.
6. In the Key Properties section, select the security type FIPS and a
key size.
7. Click Finished .
To convert existing keys using the Configuration utility
1. On the Main tab of the navigation pane, expand Local Traffic and
click SSL Certificates .
This opens the SSL Certificates screen which lists all certificates
installed on the LTM system.
2. Click a certificate name.
This displays the properties of that certificate.
3. If you want to see information about the key that is associated with
that certificate, click Key on the menu bar.
This displays the type and size of the key.
4. To convert the key to a FIPS key, click the Convert to FIPS button.
The key is converted. Once the key is converted, this process cannot
be reversed.