D-Link DGS-3000 Series Reference Manual page 274

Users can download a certificate file for the SSL function on the Switch from a TFTP server. The certificate file is a
data record used for authenticating devices on the network. It contains information on the owner, keys for
authentication and digital signatures. Both the server and the client must have consistent certificate files for optimal
use of the SSL function. Currently, the Switch comes with a certificate pre-loaded though the user may need to
download more, depending on user circumstances.
To view this window, click Security > SSL Settings as shown below:
To set up the SSL function on the Switch, configure the parameters in the SSL Settings section described.
The fields that can be configured are described below:
Parameter
SSL Status
SSL 3.0
TLS 1.0
TLS 1.1
TLS 1.2
Cache Timeout (60-
86400)
Click the Apply button to accept the changes made.
To set up the SSL cipher suite function on the Switch, configure the parameters in the SSL Cipher suite Settings
section described below:
DGS-3000 Series Gigabit Ethernet Switch Web UI Reference Guide
Figure 8-72 SSL Settings window
Description
Click to enable or disable the SSL status on the Switch. The default is Disabled.
Click to enable or disable to use SSL 3.0. The default is Disabled.
Click to enable or disable to use TLS 1.0. The default is Enabled.
Click to enable or disable to use TLS 1.1. The default is Enabled.
Click to enable or disable to use TLS 1.2. The default is Enabled.
This field will set the time between a new key exchange between a client and a host
using the SSL function. A new SSL session is established every time the client and
host go through a key exchange. Specifying a longer timeout will allow the SSL
session to reuse the master key on future connections with that particular host,
therefore speeding up the negotiation process. The default setting is 600 seconds.
265