Appendix A. Certificate Settings For Ie6 And Ie7 - LevelOne WHG-311 User Manual

Appendix A.

Certificate setting for the company with Certificate Authority
Background information

Any website or high-value Web Applications will require a client to access their websites via Secure Sockets
Layer (SSL). The browser will automatically ask for a public SSL certificate from the website and check if it is
valid. The public SSL Certificate consists of the public key and identity information which can be signed by any
established certificate authority (e.g. VeriSign). The certificate authority guarantees that the public key belongs
to the named entity. Usually, website's security certificate may encounter problem only if the security certificate
presented to the browser has not been signed by any certificate authority which can be trusted.
As long as the SSL function is enabled in the WHG CONTROLLER, there must be a public SSL certificate
signed by an established certificate authority. To avoid the error message in the browser, a company should
have its own Certificate Authority (CA). The IT department must therefore install the SSL certificate for each
normal user when deploying the WHG CONTROLLER.
Secure Certificate setting for both IE6 and IE7

For the company with its own Certificate Authority (CA), the certificate of the company should be trusted by all
his employees' computers, and the certificate should be delivered through a trusted media. For example, the
MIS staff should install the CA certificate in each computer. The company CA will issue a certificate for the
WHG CONTROLLER and export it to the WHG CONTROLLER.
Note: If the WHG CONTROLLER is installed in a company, the administrator can create a certificate using
software instead of purchasing a public trusted certificate.

Certificate setting for the company without Certificate Authority
For a company that does not have its own Certificate Authority (CA), the administrators should first apply for a
trusted certificate, or create one by using certificate software. Second, the administrators should use some
Certificate Settings for IE6 and IE7
269