Installing The Certificate And Key - GE Multilin D400 Instruction Manual

CHAPTER 6: SETTING UP THE D400

Installing the certificate and key

Prerequisites
Procedures
D400 SUBSTATION GATEWAY INSTRUCTION MANUAL
Once you have obtained your security certificate and private key, you can install them on
the D400 in two ways:
• Secure Copy - requires a PC with an installed Secure Copy Program (SCP) and a
network connection to the D400
• USB Portable Memory Device - requires local access to the D400
Before installing the certificate and key, check that the files are named as follows and
rename if necessary:
• Certificate is server.crt
• Private key is server.key
To install using Secure Copy
1. Start the Secure Copy Program.
2. Connect to and log in to the D400 using your network connection.
3. Using the Secure Copy Program, copy the server.crt and server.key files to the
following directory on the D400: /mnt/usr/D400_SysConfig/Certificate
4. Reboot the D400. See "Shutting down the D400" on page 112.
To install from the USB drive
1. Copy the server.crt and server.key files to the root directory of the USB drive.
2. Insert the USB drive into one of the front USB ports on the D400.
3. Start a terminal session and log in to the D400.
4. At the D400#>> command prompt, enter the following commands:
mkdir /mnt/usbdrive
mount -t vfat /dev/sda1 /mnt/usbdrive
cp /mnt/usbdrive/server.crt /mnt/usr/_SysConfig/Certificate
cp /mnt/usbdrive/server.key /mnt/usr/_SysConfig/Certificate
sync
umount /dev/sda1
5. Remove the USB drive.
6. Reboot the D400. See "Shutting down the D400" on page 112.
Since a USB drive could be lost or stolen, it is recommended you remove the private key
and certificate from the USB drive once you are done installing them on the D400.
Once you have installed and set up your security certificate, your secure Web access with
the D400 is enabled. From this point on, whenever you access the D400 HMI using a Web
browser, the D400 automatically sends you its Web site certificate, and your Web browser
displays a lock icon on the status bar. This indicates that you have a secure connection
with the D400.
If you receive any other security warnings or do not see the secure connection icon in your
Web browser, your computer and network connection may not be safe from outside
intruders. Check with your IT administrator on how to proceed.
GE INFORMATION 95