LEGRAND Raritan PX3TS User Manual page 380

Chapter 7: Using the Web Interface
360
4. Click Upload. The selected files are installed.
5. To verify whether the certificate has been installed successfully, check the
data shown in the Active TLS Certificate section.
Setting Up External Authentication
Important: Raritan uses TLS instead of SSL 3.0 due to published security
vulnerabilities in SSL 3.0. Make sure your network infrastructure, such as
LDAP and mail services, uses TLS rather than SSL 3.0.
For security purposes, users attempting to log in to PX3TS must be
authenticated. PX3TS supports the following authentication mechanisms:
•
Local user database on the PX3TS
•
Lightweight Directory Access Protocol (LDAP)
•
Remote Access Dial-In User Service (Radius) protocol
By default, PX3TS is configured for local authentication. If you use this method,
you only need to create user accounts. See
If you prefer external authentication, you must provide PX3TS with information
about the external Authentication and Authorization (AA) server.
If both local and external authentication is needed, create user accounts on the
PX3TS in addition to providing the external AA server data.
When configured for external authentication, all PX3TS users must have an
account on the external AA server. Local-authentication-only users will have no
access to the PX3TS except for the admin, who always can access the PX3TS.
If the external authentication fails, an "Authentication failed" message is
displayed. Details regarding the authentication failure are available in the event
log. See Viewing or Clearing the Local Event Log
Note that only users who have both the "Change Authentication Settings" and
"Change Security Settings" permissions can configure or modify the
authentication settings.
To enable external authentication:
1. Collect external AA server information. See
Information (on page 361).
2. Enter required data for external AA server(s) on the PX3TS. See
LDAP/LDAPS Servers
365).
▪
For illustrations, see
RADIUS Configuration Illustration
3. If both the external and local authentication is needed, or you have to
return to the local authentication only, see
Authentication Settings
Creating Users
(on page 473).
Gathering LDAP/Radius
(on page 362) or Adding Radius Servers
LDAP Configuration Illustration
(on page 792).
Managing External
(on page 366).
(on page 297).
Adding
(on page
(on page 777) or