2.14.6.2 About Https; 2.14.6.3 Hsts Setup - Safran SecureSync 2400 User Manual

2.14.6.2 About HTTPS

HTTPS provides secure/encrypted, web-based management and configuration
of SecureSync from a PC. In order to establish a secure HTTPS connection, an
SSL certificate must be stored inside the SecureSync unit.
SecureSync uses the OpenSSL library to create certificate requests and self-
signed certificates. The OpenSSL library provides the encryption algorithms used
for secure HTTP (HTTPS). The OpenSSL package also provides tools and soft-
ware for creating X.509 Certificate Requests, Self Signed Certificates and Priv-
ate/Public Keys. For more information on OpenSSL, please see www.openssl.org.
Once you created a certificate request, submit the request to an external Cer-
tificate Authority (CA) for the creation of a third party verifiable certificate. (It is
also possible to use an internal corporate Certificate Authority.)
If a Certificate Authority is not available, or while you are waiting for the cer-
tificate to be issued, you can use the default Safran self-signed SSL certificate
that comes with the unit until it expires, or use your own self-signed certificate.
The typical life span of a certificate (i.e., during which HTTPS is available for use)
is about 10 years.

2.14.6.3 HSTS Setup

HTTP Strict Transport Security (HSTS) support is available for SecureSync.
CHAPTER •
2 SecureSync 2400 User Manual Rev. 5.2
Note: If deleted, the HTTPS certificate cannot be restored. A new cer-
tificate will need to be generated.
Note: In a Chrome web browser, if a valid certificate is deleted or
changed such that it becomes invalid, it is necessary to navigate to
Chrome's Settings> More Tools> Clear browsing data> Advanced
and clear the Cached images and files
Chrome's security warnings may make some data unavailable in the
Web UI.
Note: If the IP Address or Common Name (Host Name) is changed,
you need to regenerate the certificate, or you will receive security
warnings from your web browser each time you log in.
2.14 Configure Network Settings
in the history. Otherwise
83