W&T 55211, Руководство пользователя

Страница: 106 / 114

106
W&T
Security & Maintenanceh
11�4 Individual certificates
For security reasons, access to the web-based management
of the Microwall is only possible in encrypted form using the
HTTPS protocol.
The Microwall‘s self-signed certificate, which is pre-installed
ex works, generates corresponding security warnings for cur-
rent browsers. These must be acknowledged for WBM acces-
ses and/or confirmed with suitable exception rules.
In network environments with increased security require-
ments, where these exceptions are not desired/allowed, the
factory certificate can be replaced by an individual certificate.
Generation, signature and installation of an individual certifi-
cate are divided into the following rough steps:
•
Generation of a CSR (Certificate Signing Request) with asso-
ciated private key in the Microwall
•
Download the CSR and external signature to a certificate by
a trusted certificate authority.
•
Upload and installation of the certificate into the Microwall
Navigate in the menu tree to the page Basic settings -> Cer-
tificate . In addition to information on the currently installed
certificate, all functions for handling individual certificates are
included here:
Create a Certificate Signing Request (CSR)
Fill in all the required information in the CSR form. The only
mandatory field is the
Common Name , under which the web
pages of the Microwall VPN will later be called up in the brow-
ser. Additional names, IP addresses and also wildcard names
can be entered under
Alternative Names . The name entered in
Common Name is automatically transferred to the Alternative
Names .
By clicking on Create , the Microwall generates a pair of keys
and creates a CSR from the information entered.