Uploading Existing Certificate; Configuring Access Types - CheckMK Rail2 Mark I Manual

Check_MK rail2 Mark I - Manual 24 / 57
In the last section Signing, you now select Create self-signed certificate. After that you can specify the
maximum validity period of the certificate.
Once this validity period has expired, you must generate a new certificate. This should be done in good
time before expiration so that there are no problems accessing your device.
Once you have confirmed the dialogue with Save, you can continue configuring the types of access.
8.1.3 Uploading existing certificate
If you have an existing certificate along with a private key, and wish to use this to protect HTTPS traffic,
you can transfer these files to your device via the Upload certificate dialogue.
Once you have confirmed the dialogue with Upload, you can continue configuring the types of access.
8.2 Configuring access types
Once you have installed a certificate, you can now configure the access types according to your require-
ments.
If you wish to protect access to your device via HTTPS, you are recommended to select the option
Forced HTTPS. The device will only respond via HTTPS, but will redirect all incoming HTTP requests to
HTTPS. This means that users who inadvertently access the web interface via HTTP , either directly or
via bookmarks, will automatically be redirected to HTTPS.
If it is very important for not a single request to go over the net in plain language, you can select the
option HTTPS only. This setting will cause users accessing via HTTP to receive an error message.
You can also have a simultaneous configuration of HTTP and HTTPS. However, this setting is only rec-
ommended in exceptional cases, for migration purposes or for testing.
If you ever want to deactivate HTTPS, you can do this by selecting the option HTTP only.
©Copyright Mathias Kettner GmbH 2018 mathias-kettner.de