Supermicro SSE-G2252, Руководство пользователя

Страница: 286 / 1401

Chapter 13: Security Measures
Configuring HTTPS
– 293 –
2.
Select Configure Global from the Step list.
3.
Enable HTTPS and specify the port number if required.
4.
Click Apply.
Figure 13-28: Configuring HTTPS
R
EPLACING THE
D
EFAULT
S
ECURE
-
SITE
C
ERTIFICATE
Use the Security > HTTPS (Copy Certificate) page to replace the default
secure-site certificate.
When you log onto the web interface using HTTPS (for secure access), a
Secure Sockets Layer (SSL) certificate appears for the switch. By default,
the certificate that the web browser displays will be associated with a
warning that the site is not recognized as a secure site. This is because the
certificate has not been signed by an approved certification authority. If
you want this warning to be replaced by a message confirming that the
connection to the switch is secure, you must obtain a unique certificate and
a private key and password from a recognized certification authority.
C
AUTION
:
For maximum security, we recommend you obtain a unique
Secure Sockets Layer certificate at the earliest opportunity. This is because
the default certificate for the switch is not unique to the hardware you have
purchased.
When you have obtained these, place them on your TFTP server and
transfer them to the switch to replace the default (unrecognized) certificate
with an authorized one.
N
OTE
:
The switch must be reset for the new certificate to be activated. To
reset the switch, see “Resetting the System” on page 94 or type “reload” at
the command prompt: Console#
reload
CLI R
EFERENCES
• “Web Server” on page 776
P
ARAMETERS
These parameters are displayed:
•
TFTP Server IP Address
– IP address of TFTP server which contains
the certificate file.