Working With Ssl Certificates; Creating A Certificate Signing Request - Ruckus Wireless ZoneDirector 1100 User Manual

Setting Administrator Preferences

Working with SSL Certificates

1. Locate the Reset pin hole on the front panel of ZoneDirector.
2. Insert a straightened paper clip in the hole and press for at least 5 seconds.
After the reset is complete, the Status LED blinks red, then blinks green, indicating that the
system is in factory default state.
After you complete the Setup Wizard, the Status LED will be steady green.

Working with SSL Certificates

If you use HTTPS to connect to the ZoneDirector Web interface, a security warning appears
every time you connect to the Web interface. This is because the default SSL certificate (or
security certificate) that ZoneDirector is using for HTTPS communication is signed by Ruckus
Wireless and is not recognized by most Web browsers.
If you want to prevent these security warnings from appearing, you will need to import an SSL
certificate that was issued by a recognized certificate authority (for example, VeriSign, Thawte,
etc). If you do not have an SSL certificate yet, you will need to create a certificate signing request
and purchase a certificate from a certificate authority.

Creating a Certificate Signing Request

If you do not have an existing SSL certificate, you will need to create a certificate signing request
(CSR) file and send it to a certificate authority (CA) to purchase an SSL certificate. The
ZoneDirector Web interface provides a form that you can use to create the CSR file. Fields with
an asterisk (*) are required entries. Those without an asterisk are optional.
To create a certificate request file
1. Go to Configure > Certificate.
2. In the Generate a Request section, complete the following options:
• Common Name*: Enter ZoneDirector's Fully Qualified Domain Name (FQDN). Typically,
this will be "zonedirector.[your company].com". You can also enter ZoneDi-
rector's IP address (e.g., "192.168.0.2"), or a familiar name by which the ZoneDirector
will be accessed in your browser (e.g., by device name such as "ZoneDirector").
NOTE: Ruckus Wireless recommends using the FQDN as the Common Name if possible. If
your network does not have a DNS server, you may use ZoneDirector's IP address instead.
However, note that some CA's may not allow this.
– If you wish to access ZoneDirector from a public network via the internet you must
use a Fully Qualified Domain Name (FQDN).
– In all cases when using a familiar name there must be an appropriate private or
public DNS entry to resolve the familiar name to ZoneDirector's IP address.
– If you use a familiar name, this name will be shown in the browser's URL whenever
accessing ZoneDirector (i.e., administrator interface, standard captive portal and
guest access captive portal).
262