GE MDS ORBIT ECR, Техническое руководство

Страница: 367 / 463

MDS 05-6632A01, Rev. F MDS Orbit MCR/ECR Technical Manual 367
Figure 3-232. Import Private Key
The MCR supports file uploads through a web browser from a local file on the user’s PC. The MCR also
supports HTTP, FTP, TFTP, and SFTP file downloads using external remote servers.

File Source - File transfer method to use. Available choices are From Local File (DEFAULT),
From HTTP Server, From FTP Server, From TFTP Server, and From SFTP Server. Local file
uploads are only available through the web UI and not through the CLI

Key Identity - The ID to ssign to the key once it is imported

Key Passphrase
– For encrypted PEM keys, the passphrase necessary to decrypt the key

Local File - For a local file, the file to upload as chosen by the file dialog popped up by the
Select File... button

URL - For HTTP, the location of the source file

Server Address - For FTP, TFTP, and SFTP, the remote server's host name or IP address

File Path - For FTP, TFTP, and SFTP, the path to the source file on the remote server

User Name - For FTP and SFTP, the user name on the remote server

Password - For FTP and SFTP, the password on the remote server

Control Port - For FTP, the TCP control port (advanced setting - use default)

Data Port - For FTP, the TCP data port (advanced setting - use default)

Block Size - For TFTP, the block size as defined in RFP 2348 (advanced setting - use default)

Timeout - For FTP, TFTP, and SFTP, the timeout in seconds (advanced setting - use default)
The following example shows how to have the device download a private key file (named
imported_key_2048.pem) from a TFTP server running on a host (address 192.168.1.10) that is accessible
from the MCR (e.g. a locally connected host or remote host accessible via cellular interface). To start the
private key import from the CLI, enter the following command to download the private key file from the
TFTP server:
> request pki private-keys import key-identity imported_key_2048 filename key_2048.pem
manual-file-server { tftp { address 192.168.1.10 } }
Monitoring - Import
Once the import of a private key is begun, the process may be cancelled by clicking the Cancel Import
button. The current status of the import process is displayed on the web page. Note that the web page does
not display the current status if the device has not been instructed to import a private key (in other words,
if the state is “inactive”).