HP J8697A, Руководство по обеспечению безопасности доступа

Страница: 221 / 390

Configuring Secure Socket Layer (SSL)
Configuring the Switch for SSL Operation
Generate a Self-Signed Host Certificate with the Web browser
interface
You can configure SSL from the web browser interface. For more information
on how to access the web browser interface refer to the chapter titled “Using
the ProCurve Web Browser Interface” in the
Management and Configuration
Guide for your switch.
To generate a self signed host certificate from the web browser interface:
i. Proceed to the Security tab then the SSL button. The SSL config­
uration screen is split up into two halves. The left half is used in
creating a new certificate key pair and (self-signed / CA-signed)
certificate. The right half displays information on the currently
installed certificate.
ii. Select the Generate Certificate button.
iii. Select Self signed certificate in the type box.
iv. Select the RSA key size desired. If you do not wish to generate a
new key then just select current from the list.
v. Fill in remaining certificate arguments (refer to “To Generate or
Erase the Switch’s Server Certificate with the CLI” on page 8-10).
vi. Click on the
[Apply Changes]
button to generate a new certificate
and key if selected.
N o t e :
When generating a self-signed host certificate, if no key is present and the
current option is selected in the RSA key size box and error will be generated.
New key generation can take up to two minutes if the key queue is empty.
8-13