Raritan PX2-1000 SERIES, Руководство пользователя

Страница: 194 / 648

Chapter 6: Using the Web Interface
175
Having an X.509 digital certificate ensures that both parties in an TLS
connection are who they say they are.
To obtain a certificate for the PX, create a Certificate Signing Request
(CSR) and submit it to a certificate authority (CA). After the CA
processes the information in the CSR, it provides you with a certificate,
which you must install on the PX device.
Note 1: If you are using a TLS certificate that is part of a chain of
certificates, each part of the chain is signed during the validation
process.
Note 2: See Forcing HTTPS Encryption (on page 159) for instructions
on forcing users to employ TLS when connecting to the PX.
A CSR is not required in either of the following scenarios:

You decide to generate and use a
self-signed
certificate on the PX
device.

Appropriate, valid certificate and key files are already available.
Certificate Signing Request
When appropriate certificate and key files for the PX are NOT available,
one of the alternatives is to create a CSR and private key on the PX
device, and send the CSR to a CA for signing the certificate.
Creating a Certificate Signing Request
Follow this procedure to create the CSR for your PX device.
To create a CSR:
1. Choose Device Settings > Security > SSL Certificate. The Manage
SSL Certificate dialog appears.
2. Click the New SSL Certificate tab.
3. Provide the information requested.
 In the Subject section:
Field Type this information
Country (ISO Code) The country where your company is located. Use the standard ISO
country code. For a list of ISO codes, visit the
ISO website
State or Province
The full name of the state or province where your company is located.
Locality The city where your company is located.
Organization The registered name of your company.
Organizational Unit The name of your department.