Sony SRG-300SE Ipela User Manual page 34

SSL server authentication
Certificate options
Select an installation mode of the certificate.
Use an external certificate: Uses the certificate
including private key information issued by a CA.
The PKCS#12 and PEM formats are supported.
Note
SSL is not available when Certificate options-Use an
external certificate is selected, or certificate and private
key password is not set properly even SSL is set to
"Enable".
Use a self-signed certificate (For test use): This mode
uses the certificate and private key pair generated by
"Self-signed certificate generation" on page 34.
Private key information corresponding to the
certificate is stored in the camera.
You do not need to install an external certificate.
However, you cannot execute the existence proof that
is one of the SSL functions for the following reasons.
– The private key generated in the camera is self-
signed by the camera.
– A prepared value is set for a distinguished name
(Common name, etc).
– The certificate is not issued by a trusted CA.
For reasons of security, we recommend using this
mode only when there is no problem even if perfect
security is not saved.
Notes
• When Use a self-signed certificate (For test use) is
selected, the Security Alert dialog appears on the
SSL connection with a browser.
For details, refer to "Using the SSL function" on
page 11.
• SSL connection may be impossible due to the type of
certificate installed in the camera. In this case, refer to
"How to install the CA certificate" on page 35 and
install.
To import the certificate
Click Browse... to select the certificate to be imported.
Click the OK button appearing on the dialog when you
select the file, to import it to the camera.
Note
The import process becomes invalid if the selected file is
not a certificate or the imported certificate is not
allowed.
34
Setting the Security — Security Menu
Self-signed certificate generation
A self-signed certificate can be generated in the camera
to be used when Use a self-signed certificate (For test
use) is selected from Certificate options.
Click Generate to generate a self-signed certificate in
the camera. Clicking Generate again after Generate
has been clicked once will update the self-signed
certificate stored in the camera.
Note
Make sure to set the date and time on the camera
correctly before performing this operation. If the date
and time are not correctly set, it may cause browser
connection problems. Before selecting Generate in
Self-signed certificate generation, click OK to select
Use a self-signed certificate (For test use) in
Certificate options.
To display certificate information
When the certificate has been set in the camera correctly,
its information appears on Status, Issuer DN, Subject
DN, Available period and Extended Key Usage.
Status
Shows if the status of the certificate is valid or invalid.
The following statuses are recognized.
Valid: The certificate is correctly stored and set.
Invalid: The certificate is not correctly stored and set.
Possible causes are as follows:
– Use an external certificate is selected and the
private key password included in the certificate is
not specified correctly.
– Use an external certificate is selected and the
private key password is specified in spite of the fact
that the key pair in the certificate is not encrypted.
– Use an external certificate is selected and the key
pair is not included in the certificate.
– Use a self-signed certificate (For test use) is
selected without the self-signed certificate being
generated.
Note
When the certificate to be imported is of PKCS#12
format and the private key password is not set correctly,
<Put correct private key password> is displayed in the
boxes of Issuer DN, Subject DN, Available period and
Extended Key Usage.
Specify the correct private key password to confirm the
information of the certificate.
To delete the imported certificate or self-signed
certificate
Click Delete to delete the certificate or self-signed
certificate imported to the camera.