12 Encryption and Digital Signature Settings
352
E
n
cr
y
p
tion a
nd Digit
a
l S
igna
tur
e Se
tt
ings
12
Configuration of Encryption using IPSec
This section describes how to encrypt communications using IPSec.
When the IKE authentication method is set to [Authenticate by Preshared Key], skip
step 1 "Import and Configuration of a Certificate" and go to step 2 "Configuration on the
Machine (Configuration of IPSec)".
For IKE authentication methods, refer to "IKE Authentication Method" (P.191).
Step1 Import and Configuration of a Certificate ......................................................................352
Step2 Configuration on the Machine (Configuration of IPSec) ...............................................353
Step3 Configuration on the Computer ......................................................................................354
Installation Overview
To encrypt communications using IPSec, configure the machine and your computer as
follows:
Configuration on the Machine
When [IKE Authentication Method] is set to [Authenticate by Digital Signature],
configure a certificate on the machine. No certificate is registered on the machine by
factory default. After importing a certificate, configure IPSec.
Configure the following setting to set up a certificate on the machine.
z
Configuring certificates by CentreWare Internet Services
- Enable HTTPS, and then import a certificate issued by another CA to the machine.
Note
•
If a certificate to be imported as an IPSec certificate contains V3 extension "KeyUsage",
"digitalSignature" bit must be asserted.
Configuration on the Computer
Configure the following settings to encrypt communications between a computer and
the machine.
z
Create an IP security policy
z
Assign the IP security policy
Step1 Import and Configuration of a Certificate
The following describes configuration procedures to set up a certificate with
CentreWare Internet Services.
To configure a certificate using CentreWare Internet Services, configure the encryption
settings for HTTP communications, and then import a certificate issued by another CA
to use it for the IPSec certificate.
Note
•
You cannot use a self-signed certificate created with CentreWare Internet Services for
IPSec.
For details on how to configure the encryption settings for HTTP communication, refer to
"Configuration of HTTP Communications Encryption" (P.350).
1
Start CentreWare Internet Services.
For more information on how to start CentreWare Internet Service, refer to "Starting CentreWare
Internet Services" (P.276).
Содержание apeosport-iv C2270
Страница 14: ......
Страница 34: ......
Страница 58: ......
Страница 133: ...Tools Menu List 131 Tools 5 Overwrite Hard Disk P 271 z Number of Overwrites P 271...
Страница 304: ......
Страница 314: ......
Страница 336: ......
Страница 348: ......
Страница 400: ......
Страница 556: ......
Страница 672: ......