Authentication Via An Own Certificate Structure - insys icom MRX Installation And User Manual

Operating Principle

12.2.2 Authentication via an own certificate structure

A more secure alternative is to use your own certificate structure and load a
self-generated certificate/key combination onto the router and then use this
for access via an HTTPS connection.
Proceed as follows in coordination with the IT security department of your
company to ensure a secure availability of the router:
1. Ask the DNS administrator of your company to create a DNS entry, which
resolves the name of the router (e.g. router01.internal.company-
domain.com) to the planned IP address of the router.
2. Ask the PKI administrator of your company responsible for the certificate
structure issue and sign a certificate on the name of the router (e.g.
router01.internal.company-domain.com).
3. Install this certificate and the associated key on the router as part of a
secure initial setup (the router must only be connected to the
configuration computer via an Ethernet cable with this). Upload these to
the router in the Administration -> Certificates menu.
Select this certificate/key combination in the Administration -> Config access
-> Web/REST interface menu for the configuration of the web/REST interface:
access via HTTPS.
92
MRX