Motorola 2.1, Руководство по настройке сети

Страница: 43 / 135

Chapter 2: Network Setup
2
Export the authentication server certificate.
•
Right click the server certificate,
•
Choose All Tasks / Export.
•
Export the cert, including its private key, to a PFX file. You do not need to export all
certificates in the path or to enable strong protection. You should not delete the private
key if the export is successful.
•
Select a password used to encrypt and protect the certificate. In our reference design
we used g0ld11.
•
Name the certificate
server
and save it to a folder on the server. It will save it as a .pfx
file.
3
Find the valid CA certificate installed on the authentication server.
•
Run the local computer account
Certificates
MMC snap-in.
•
Open the
Trusted Root Certificate Authorities / Certificates
folder.
4
Export the CA certificate.
•
Right click the root CA certificate.
•
Choose
All Tasks / Export
.
•
If asked, do not export the private key.
Export the root certificate to the
DER encoded binary X.509 (.CER)
format.
Save and name the certificate
root
to a folder on the server.
The DER encoded trusted root certificates must have a .der extension but the
Microsoft certificate export tool automatically appends a .CER extension to the
exported file.
You will have to manually rename the file to
root.der
after it has
been exported.
Installing Certificates
Procedure 2-10 Installing Certificates
1
Open web browser and navigate to the Steel Belted Radius GUI:
http://172.31.0.21:1812
Click the
Launch
button to start Steel Belted Radius
2-29