Sony BRC-X400 Operating Instructions Manual page 77

Note
SSL connection will load the camera down;
therefore, not all images may be downloaded, and
the mark may appear when the camera accesses
the setting window from the web browser. In this
case, reload the window. Press the F5 key on the
keyboard to reload.
SSL server authentication
Certificate options
Select an installation mode of the certificate.
[Use an external certificate]: Uses the certificate
including private key information issued by a
CA. The PKCS#12 and PEM formats are
supported.
Note
SSL is not available when [Certificate options]-[Use
an external certificate] is selected, or certificate and
private key password is not set properly even SSL is
set to [Enable].
[Use a self-signed certificate (For test use)]: This
mode uses the certificate and private key pair
generated by "Self-signed certificate
generation" (page 77). Private key
information corresponding to the certificate
is stored in the camera.
You do not need to install an external
certificate. However, you cannot execute the
existence proof that is one of the SSL
functions for the following reasons.
– The private key generated in the camera is
self-signed by the camera.
– A prepared value is set for a distinguished
name (Common name, etc).
– The certificate is not issued by a trusted CA.
For reasons of security, we recommend using
this mode only when there is no problem
even if perfect security is not ensured, such
as for operation test.
Notes
• When [Use a self-signed certificate (For
test use)] is selected, the [Security Alert]
dialog appears on the SSL connection with
a web browser.
For details, see "When the SSL Function is
Used" (page 55).
• SSL connection may be impossible due to
the type of certificate installed in the
camera. In this case, refer to "To import the
CA certificate" on page 80 and install.
To import the certificate
Click [Choose File] to select the certificate to be
imported. Follow the on-screen instructions to
import the certificate to the camera.
Note
The import process becomes invalid if the selected
file is not a certificate or the imported certificate is
not allowed.
Self-signed certificate generation
A self-signed certificate can be generated in the
camera to be used when [Use a self-signed
certificate (For test use)] is selected from [Certificate
options].
Click [Generate] to generate a self-signed certificate
in the camera. Clicking [Generate] again after
[Generate] has been clicked once will update the
self-signed certificate stored in the camera.
Note
Make sure to set the date and time on the camera
correctly before performing this operation. If the
date and time are not correctly set, it may cause web
browser connection problems. Before selecting
[Generate] in [Self-signed certificate generation],
click [OK] to select [Use a self-signed certificate (For
test use)] in [Certificate options].
To display certificate information
When the certificate has been set in the camera
correctly, its information appears on [Status], [Issuer
DN], [Subject DN], [Available period] and [Extended
key usage].
Status
Shows if the status of the certificate is valid or
invalid. The following statuses are recognized.
[Valid]: The certificate is correctly stored and set.
[Invalid]: The certificate is not correctly stored and
set.
Possible causes are as follows:
– [Use an external certificate] is selected and
the private key password included in the
certificate is not specified correctly.
– [Use an external certificate] is selected and
the private key password is specified in
spite of the fact that the key pair in the
certificate is not encrypted.
– [Use an external certificate] is selected and
the key pair is not included in the
certificate.
– [Use a self-signed certificate (For test use)]
is selected without the self-signed
certificate being generated.
Note
When the certificate to be imported is of PKCS#12
format and the private key password is not set
correctly, "<Put correct private key password>" is
displayed in the boxes of [Issuer DN], [Subject DN],
[Available period] and [Extended key usage].
Specify the correct private key password to confirm
the information of the certificate.
77