Configuring An Ssl Client Policy; Configuration Prerequisites; Configuration Procedure - HP 5120 SI Series Security Configuration Manual

[Device] ip https enable
# Create a local user named usera, and set the password to 123 and service type to telnet.
[Device] local-user usera
[Device-luser-usera] password simple 123
[Device-luser-usera] service-type telnet
2. Configure the HTTPS client (Host)
On Host, launch IE, enter http://10.1.2.2/certsrv in the address bar and request a certificate for Host as
prompted.
3. Verify your configuration
Launch IE on the host, enter https://10.1.1.1 in the address bar, and select the certificate issued by the CA
server. The web interface of the device should appear. After entering username usera and password 123,
you should be able to log in to the web interface to access and manage the device.
NOTE:
• For more information about PKI configuration commands and the public-key local create rsa
command, see the
For more information about HTTPS, see the
•

Configuring an SSL client policy

An SSL client policy is a set of SSL parameters for a client to use when connecting to the server. An SSL
client policy takes effect only after it is associated with an application layer protocol.

Configuration prerequisites

If the SSL server is configured to authenticate the SSL client, you must configure the PKI domain for the SSL
client policy to use to obtain the certificate of the client. For more information about PKI domain
configuration, see the chapter "PKI configuration."

Configuration procedure

Follow these steps to configure an SSL client policy:
To do...
Enter system view
Create an SSL client policy and
enter its view
Specify a PKI domain for the SSL
client policy
Security Command Reference
Use the command...
system-view
ssl client-policy policy-name
pki-domain domain-name
285
.
Fundamentals Configuration Guide
.
Remarks
—
Required
Optional
No PKI domain is configured by
default.