Configuring An Ssl Client Policy; Configuration Prerequisites; Configuration Procedure - HP A5830 Series Configuration Manual

[Device] ssl server-policy myssl
# Specify the PKI domain for the SSL server policy as 1.
[Device-ssl-server-policy-myssl] pki-domain 1
# Enable client authentication.
[Device-ssl-server-policy-myssl] client-verify enable
[Device-ssl-server-policy-myssl] quit
# Configure HTTPS service to use SSL server policy myssl.
[Device] ip https ssl-server-policy myssl
# Enable HTTPS service.
[Device] ip https enable
# Create a local user named usera, and set the password to 123 and service type to telnet.
[Device] local-user usera
[Device-luser-usera] password simple 123
[Device-luser-usera] service-type telnet
Configure the HTTPS client (Host).
2.
On Host, launch IE, enter http://10.1.2.2/certsrv in the address bar and request a certificate for Host
as prompted.
Verify the configuration.
3.
Launch IE on the host, enter https://10.1.1.1 in the address bar, and select the certificate issued by the
CA server. The web interface of the switch should appear. After entering username usera and password
123, you should be able to log in to the web interface to access and manage the switch.
For more information about PKI configuration commands, see
For more information about the public-key local create rsa command, see Security Command Reference.
For more information about HTTPS, see Fundamentals Configuration Guide.

Configuring an SSL client policy

An SSL client policy is a set of SSL parameters for a client to use when connecting to the server. An SSL
client policy takes effect only after it is associated with an application layer protocol.

Configuration prerequisites

If the SSL server is configured to authenticate the SSL client, you must configure the PKI domain for the
SSL client policy to use to obtain the certificate of the client. For more information about PKI domain
configuration, see

Configuration procedure

To configure an SSL client policy:
To do...
1. Enter system view.
2. Create an SSL client policy
and enter its view.
"Configuring PKI."
Use the command...
system-view
ssl client-policy policy-name
"Configuring
Remarks
—
Required.
204
PKI."