&
User
AN-80i
Manual
70-00072-01-08b
Proprietary Redline Communications © 2009
Page 111 of 128
June 4, 2009
Example: Load SSL certificate and key files for the AN-80i unit with the MAC address 00
09 02 01 C1 9A. The TFTP server address is 192.168.25.1.
192.168.25.2# load file 192.168.25.1 ssl_cert_00-09-02-01-C1-9A.pem
192.168.25.2# load file 192.168.25.1 ssl_key_00-09-02-01-C1-9A.pem
192.168.25.2# reboot
The unit must be rebooted following any changes (load/del) to the user table files.
Table 51: Security -- SSL Factory and Software Upgrade
Feature
Parameters
Field Upgrade
Factory Installed)
SSL:
Secure
Web
ssl_cert<mac>.pem
ssl_key<mac>.pem
1. Use the default (embedded)
certificate and private key.
--- or ---
2. Use 'load' command to save
externally generated certificate
and key in the user table.
v3.09-PTP/11.20-PMP or
higher:
(1) and (2) as in field
upgrade.
Important: Always use secure transfer and storage when working with
encryption keys and certificates. Store encryption keys and certificate
information in a secure location. It is recommended to use the local Ethernet
port when loading encryption keys and certificates on the AN-80i.
7.3
Security Certificate and Key Files
7.3.1 Runtime Keys and Certificate
The following table lists keys and certificates loaded into runtime settings at reboot. Use
the CLI command '
show files run
' to display the runtime settings.
Table 52: Security: Runtime Keys and Certificates
dsa_key_<mac>.pem
DSA key used for SSH.
rsa_key_<mac>.pem
RSA Key used for SSH.
ssl_cert<mac>.pem SSL
X.509
certificate.
ssl_key<mac>.pem
SSL RSA key.
fact_wacert_<mac>.der
Factory X.509 authority certificate.
fact_wcert_<mac>.der
Factory X.509 certificate.
fact_wkey_<mac>.der
Factory RSA key.
usr_wacert_<mac>.der
User X.509 authority certificate.
usr_wcert_<mac>.der User
X.509
certificate.
usr_wkey_<mac>.der
User RSA key.