TYAN S4992, Руководство пользователя

Страница: 73 / 148

67
http://www.TYAN.com
3.5.6.4 Certificate
The KVM-over-IP Sever Management uses the Secure Socket Layer (SSL)
protocol for any encrypted network traffic between itself and a connected client.
During the connection establishment, KVM-over-IP Sever Management has to
expose its identity to a client using a cryptographic certificate. Upon delivery this
certificate and the underlying secret key is the same for all KVM-over-IP Sever
Management ever produced and certainly will not match the network
configuration that will be applied to the KVM-over-IP Sever Management cards
by its user. The certificate’s underlying secret key is also used for securing the
SSL handshake. Hence, this is a security risk (but far better than no encryption
at all).
However, it is possible to generate and install a new base64 x.509 certificate
that is unique for a particular KVM-over-IP Sever Management card. In order to
do that, the OPMA module is able to generate a new cryptographic key and the
associated Certificate Signing Request (CSR) that needs to be certified by a
certification authority (CA). A certification authority verifies that you are the
person who you claim you are and signs and issues a SSL certificate to you.
To create and install a SSL certificate for KVM-over-IP Sever Management the
following steps are necessary: