Table of Contents
Advertisement
Appendix B.
Certificate setting for the company with Certificate Authority
Background information
Any website or high-value Web Applications will require a client to access their websites via Secure Sockets
Layer (SSL). The browser will automatically ask for a public SSL certificate from the website and check if it is
valid. The public SSL Certificate consists of the public key and identity information which can be signed by any
established certificate authority (e.g. VeriSign). The certificate authority guarantees that the public key belongs
to the named entity. Usually, website's security certificate may encounter problem only if the security certificate
presented to the browser has not been signed by any certificate authority which can be trusted.
As long as the SSL function is enabled in the WHG-505, there must be a public SSL certificate signed by an
established certificate authority. To avoid the error message in the browser, a company should have its own
Certificate Authority (CA). The IT department must therefore install the SSL certificate for each normal user
when deploying the WHG-505.
Secure Certificate setting for both IE6 and IE7
For the company with its own Certificate Authority (CA), the certificate of the company should be trusted by all
his employees' computers, and the certificate should be delivered through a trusted media. For example, the
MIS staff should install the CA certificate in each computer. The company CA will issue a certificate for the
WHG-505 and export it to the WHG-505.
Note: If the WHG-505 is installed in a company, the administrator can create a certificate using software
instead of purchasing a public trusted certificate.
Certificate setting for the company without Certificate Authority
For a company that does not have it own Certificate Authority (CA), the administrators should first apply for a
trusted certificate, or create one by using certificate software. Second, the administrators should use some
trusted media to install this certificate (as trusted CA) in each employee's computer, and in the meantime
export this certificate to the WHG-505.
In some circumstance, the company without Certificate Authority may follow the steps stated below to avoid
error message. When in the LAN environment of the office instead of a wireless environment, administrators
may already have recognized certificates in the system which the CA must be verified as secured.
Certificate Settings for IE6 and IE7
257
Advertisement
Table of Contents
