Raritan EMX2-888, Руководство пользователя

Страница: 187 / 568

Chapter 6: Using the Web Interface
173
Having an X.509 digital certificate ensures that both parties in an TLS
connection are who they say they are.
To obtain a certificate for the EMX, create a Certificate Signing Request
(CSR) and submit it to a certificate authority (CA). After the CA
processes the information in the CSR, it provides you with a certificate,
which you must install on the EMX device.
Note 1: If you are using a TLS certificate that is part of a chain of
certificates, each part of the chain is signed during the validation
process.
Note 2: See Forcing HTTPS Encryption (on page 157) for instructions
on forcing users to employ TLS when connecting to the EMX.
A CSR is not required in either of the following scenarios:

You decide to generate and use a
self-signed
certificate on the EMX
device.

Appropriate, valid certificate and key files are already available.
Certificate Signing Request
When appropriate certificate and key files for the EMX are NOT available,
one of the alternatives is to create a CSR and private key on the EMX
device, and send the CSR to a CA for signing the certificate.
Creating a Certificate Signing Request
Follow this procedure to create the CSR for your EMX device.
To create a CSR:
1. Choose Device Settings > Security > SSL Certificate. The Manage
SSL Certificate dialog appears.
2. Click the New SSL Certificate tab.
3. Provide the information requested.
 In the Subject section:
Field Type this information
Country (ISO Code) The country where your company is located. Use the standard ISO
country code. For a list of ISO codes, visit the
ISO website
(
http://www.iso.org/iso/country_codes/iso_3166_code_lists.htm
).
State or Province The full name of the state or province where your company is located.
Locality The city where your company is located.
Organization The registered name of your company.
Organizational Unit The name of your department.