Https Login Example - HP A5830 Series Configuration Manual

HTTPS login example

Network requirements
As shown in Figure
Configure the Device as the HTTPS server, and request a certificate for it.
•
The Host acts as the HTTPS client. Request a certificate for it.
•
In this example, Windows Server acts as the CA. Install SCEP add-on on the CA. The name of the CA
that issues certificates to the Device and Host is new-ca.
Before performing the following configuration, make sure that the Device, Host, and CA can reach each
other.
To log in to the web interface through HTTPS, enter the URL address starting with https://.
•
To log in to the web interface through HTTP, enter the URL address starting with http://.
•
For more information about PKI configuration commands, see Security Command Reference.
•
For more information about the public-key local create rsa command, see Security Command
•
Reference.
For more information about SSL configuration commands, see Security Command Reference.
•
Figure 20 Network diagram for configuring HTTPS login
10.1.1.1/24
10.1.1.2/24
Host
Configuration procedure
Configure the device that acts as the HTTPS server
1.
# Configure a PKI entity, configure the common name of the entity as http-server1, and the FQDN of the
entity as ssl.security.com.
<Device> system-view
[Device] pki entity en
[Device-pki-entity-en] common-name http-server1
[Device-pki-entity-en] fqdn ssl.security.com
[Device-pki-entity-en] quit
# Create a PKI domain, specify the trusted CA as new-ca, the URL of the server for certificate request as
http://10.1.2.2/certsrv/mscep/mscep.dll, authority for certificate request as RA, and the entity for
certificate request as en.
[Device] pki domain 1
[Device-pki-domain-1] ca identifier new-ca
[Device-pki-domain-1] certificate request url http://10.1.2.2/certsrv/mscep/mscep.dll
20, configure HTTPS login to prevent unauthorized users from accessing the Device:
Device
10.1.2.1/24
10.1.2.2/24
CA
55