LEGRAND Server Technology PRO3X User Manual page 199

Note: If you are using a certificate that is part of a chain of certificates, each part of the chain is signed
during the validation process.
▶
To download active key and certificate files from PRO3X:
1) Choose Device Settings > Security > TLS Certificate.
2) In the Active TLS Certificate section, click Download Key and Download Certificate respectively.
Note: The Download Key button in the New TLS Certificate section, if present, is for downloading the
newly-created private key rather than the one of the currently-installed certificate.
3) You are prompted to open or save the file. Click Save to save it onto your computer.
▶
To install available key and certificate files onto PRO3X:
1) Choose Device Settings > Security > TLS Certificate.
2) Select the "Upload key and certificate" checkbox at the bottom of the page.
3) The 'Key File' and 'Certificate file' buttons appear. Click each button to select the key and/or
certificate file.
4) Click Upload. The selected files are installed.
5) To verify whether the certificate has been installed successfully, check the data shown in the Active
TLS Certificate section.
Setting Up External Authentication
Important: Make sure your network infrastructure uses TLS rather than SSL.
PRO3X supports the following authentication mechanisms:
• •
Local user database
• •
LDAP
• •
RADIUS
• • TACACS+
Local authentication is the default method. If you use this method, you only need to create user
accounts. See User Management
If you prefer external authentication, you must provide information about the external Authentication
and Authorization (AA) server.
If both local and external authentication is needed, create user accounts on the PRO3X in addition to
providing the external AA server data.
When configured for external authentication, all users must have an account on the external AA server.
Local‑authentication-only users will have no access to the PRO3X except for the admin, who always can
access.
(on page 148).
199