HP PS1810 SERIES, Руководство по управлению и настройке

Страница: 58 / 100

5-4
Security
Secure Connection
Downloading SSL Certificates and Diffie-Hellman Files
Use the Update Manager page to download a public key certificate that has been signed by another
server, or a root certificate that has been signed by a certificate authority. You can also download Diffie-
Hellman (DH) encryption parameter files, which establish the algorithms for encrypting key exchanges.
Before you download a file to the switch, the following conditions must be true:
■ The file is on the server in the appropriate directory.
■ The file is in the correct format.
■ The switch has a path to the server.
Use the following procedures to download an SSL certificate or DH files.
1. Click Download Certificates .
The Update Manager page displays.
Figure 5-3. Using Update Manager to Download Certificates
2. Select the protocol to use, based on the server type that the certificate is stored on: TFTP or HTTP .
3. For an HTTP upload, browse for the file on your local computer or network.
For a TFTP upload, enter the Server IP address, and specify the File Path and File Name .
4. From the Update Type field on the File Download page, select one of the following:
•
SSL Trusted Root Certificate PEM File
: SSL Trusted Root Certificate File (PEM Encoded)—An
SSL certificate that has been digitally signed by a certificate authority.
• SSL Server Certificate PEM File : SSL Server Certificate File (PEM Encoded)— An SSL certificate
that has been signed by another server.
•
SSL DH Weak Encryption Parameter PEM File
or
SSL DH Strong Encryption Parameter PEM File
— DH
certificates provide the algorithms for encrypting key exchanges and are used independent of
the certificate. The weak version uses a cipher strength of 512 bits and the strong version uses
a cypher strength of 1024 bits. Browser settings determine which DH file parameters are
requested at the start of the SSL session.
5. Click Download .
To view that status of the update, you can view the
Status > Log
page.
6. To return to the Secure HTTP Configuration page, click
Security > Secure Connection
in the
navigation pane.
7. To enable the HTTPS admin mode, select
Enable
from the
HTTPS Admin Mode
field, and then click
Apply
.