3Com 3CRWX120695A Installation And Basic Configuration Manual page 49

Enabling Secure Communication for 3WXM or Web Manager
When you select an option to import information from the WX switch
into 3WXM, it displays a dialog that shows the switch's certificate
information and provides options for handling the certificate. You can
configure 3WXM to always accept self-signed certificates from WX
switches. (For more information, see the
Reference Manual.)
Installing a Certificate Assigned by a Certificate Authority
You can install a WX switch certificate assigned by a CA in one of the
following ways:
Install a PKCS #12 object file—To use this method:
a Use TFTP to download onto the switch a PKCS #12 object file
containing a public-private key pair and a certificate assigned by the
CA.
b Assign a one-time password to authenticate the PKCS #12 object file.
c Install the public-private key pair and certificate from the PKCS #12
object file into the switch's certificate and key store.
(For more information, see "Installing a Certificate from a PKCS #12
Object File" on page 50.)
Install a PKCS #7 object file—To use this method:
a Generate a public-private key pair on the switch.
b Generate a certificate request on the switch.
c Use the request (a PKCS #10 object) to obtain a certificate from the
CA.
d Install the certificate assigned by the CA (a PKCS #7 object file) into
the switch's certificate and key store.
(For more information, see "Installing a Certificate from a PKCS #7
Object File" on page 50.)
In either case, you also need to install the CA's own certificate on the
switch and on the 3WXM or Web Manager host. The CA's certificate
allows 3WXM or Web Manager to verify that the switch certificate
assigned by the CA is valid.
Some certificate authorities refer to PKCS object files as base64 encoded
files.
Wireless LAN Switch Manager
49