ProCurve 800, Руководство по настройке

Страница: 186 / 406

3-58
Initial Setup of the ProCurve NAC 800
Digital Certificates
d. Enter this command:
For example:
pscp C:\\certificates\myCA.cer root@10.2.1.20://myCA.cer
e. When prompted, enter the NAC 800’s root password.
3. Log in as root to the NAC 800.
4. Enter this command:
For example:
ProCurve NAC 800:# keytool -import -alias myCA -file myCA.cer -keystore
/usr/local/java/jre/lib/security/cacerts
5. When prompted, enter the password for the cacerts keystore (default:
changeit)
.
6. When prompted to trust the certificate, enter yes .
Create a Certificate Request and Transfer It off the NAC 800
To obtain a certificate from a CA, you must submit a certificate request. The
request includes the public key and information about the NAC 800 and your
organization.
Syntax: pscp < path\filename > root@< IP address >://<path/ ca_cert_filename >
Replace
< path\filename >
with the path and filename of the CA
certificate that is saved on your workstation. Replace
< IP
address > with the NAC 800’s IP address. (Alternately, you can
enter its hostname). Replace
< path / ca_cert_filename >
with the
name that you choose to give the CA certificate file on the NAC
800.
Syntax: keytool -import -alias < CA_name > -file < path / ca_cert_filename >
-keystore /usr/local/java/jre/lib/security/cacerts
Replace < CA_name> with a name that you choose for the CA.
Replace
< path/ca_cert_filename >
with the filename that you
gave to the CA certificate in step 2-d.
This command adds the CA certificate, identified by the CA
name, to the cacerts keystore in the
usr/local/java/jre/lib/
security
directory.