Step 4: Installing A New Ssl Certificate; Manual Installation; Automatic Installation - Colubris Networks CN3000 Administrator's Manual

Chapter 10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - SSL certificates - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Chapter 10

Step 4: Installing a new SSL certificate

Use this procedure to replace the SSL certificate that ships with the CN3000 with one of
your own. This certificate is used when validating user logins to the management tool
via SSL and when accepting authentication information from a remote server when
NOC authentication is active.
Before you can install a new SSL certificate, make sure that it conforms to the following:
• It must be in PKCS #12 format. See
• It must contain a private key. (The password is used to access the private key.)
• It must not have a name that is an IP address. The name should be a domain name
• It must contain the entire certificate chain if signed by an intermediate certificate
• It must not have a "_" in its name.
The name in the certificate is automatically assigned as the domain name of the
CN3000. The default certificate has the name wireless.colubris.com.
Manual To install a new SSL certificate, do the following:
1. Use your web browser to open the management tool.
installation
2. On the Security menu, click Certificates.
3. In the Web server - SSL certificate box, specify the location of the new certificate
4. Click install.
Automatic The CN3000 can automatically retrieve and install a custom SSL certificate from any
URL that you specify. For details see page 158.
installation
Important: When you create or request a certificate, the password must be the same as
the password configured on the Security > Authentication page.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 207 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
page 206 for directions on how to do this.
containing at least one dot. If you try to add a certificate with an invalid name, the
default certificate is restored.
authority.
and its password. If you are using the certificate created by the example in this
chapter:
• The certificate is located in: c:\certificates\www.company.com.pkcs12.
• The password is your_export_password.
"Converting a certificate to PKCS #12 format" on