-
70
-
4.9.2
mTLS (Optional)
The lidar is in TLS (one-way auth) mode by default. mTLS (two-way auth) is recommended to enhance security:
· See Section 4.2 (Web Control - Settings) for uploading the user certificate.
· Before checking live point cloud data in PandarView, upload both the user certificate and the corresponding private key. See
PandarView
User Manual
(Check Live Data).
Requirements for the user certificate (chain):
File Size
Within 10 KB
Certificate Version
X.509 v3
Depth of Chain
Unlimited
Validity Period
The lidar can only retrieve the current time by connecting to an external clock source (GPS/PTP). Without an external
source, the lidar's system time does not reflect the current time.
To make sure your user certificate is always valid (with or without an external clock source),
·
the start date of the validity period should be 2019-01-01 or an earlier date
·
the expiry date should be later than the current date
Extensions
If certificate extensions are used:
·
Include a user_cert extension
·
Include "TLS Web Client Authentication" in the "X509v3 Extended Key Usage" field
In mTLS mode,
· users can reset the password by sending the PTCS command
PTC_COMMAND_SET_WEB_LOGIN_PASSWD
, see Chapter 5 (Communication
· when the lidar connects to a new PC, users need to login again and upload the user certificate for the new PC.
· in case the private key to the user certificate is forgotten, login and upload a new user certificate.
Before shipping loaned lidars or lidars under RMA, make sure to remove the uploaded user certificate by clicking the "Clean" button on
the Settings page of web control.
Содержание QT128C2X
Страница 1: ...QT128C2X 128 Channel Short Range Mechanical Lidar User Manual HEVLWH...
Страница 18: ...16 2 Setup 2 1 Mechanical Installation Figure 2 1 Left View Unit mm...
Страница 19: ...17 Figure 2 2 Mounting Base Unit mm...
Страница 20: ...18 2 1 1 Recommended Installation Figure 2 3 Recommended Installation...
Страница 70: ...68 In case the following warnings appear select Trust this CA to identify websites...